From 6da00a262685826be989085b1759cc2f37ddb4cd Mon Sep 17 00:00:00 2001
From: Mike Reeves <luke@geekempire.com>
Date: Fri, 30 Nov 2018 10:57:15 -0500
Subject: [PATCH] Suricata Module - Fix MTU for EVAL

---
 salt/suricata/files/suricata.yaml     | 4 ++++
 salt/suricata/files/suricataMETA.yaml | 5 +++++
 so-setup-network.sh                   | 1 +
 3 files changed, 10 insertions(+)

diff --git a/salt/suricata/files/suricata.yaml b/salt/suricata/files/suricata.yaml
index 01ea9c9bf..02dd9e247 100644
--- a/salt/suricata/files/suricata.yaml
+++ b/salt/suricata/files/suricata.yaml
@@ -1,7 +1,11 @@
 %YAML 1.1
 ---
 {%- set interface = salt['pillar.get']('sensor:interface', 'bond0') %}
+{%- if grains['role'] == 'so-eval' %}
+{%- set MTU = "1500"}
+{%- else %}
 {%- set MTU = salt['pillar.get']('sensor:mtu', '1500') %}
+{%- endif %}
 {%- if salt['pillar.get']('sensor:homenet') %}
   {%- set homenet = salt['pillar.get']('sensor:hnsensor', '') %}
 {%- else %}
diff --git a/salt/suricata/files/suricataMETA.yaml b/salt/suricata/files/suricataMETA.yaml
index b064acd8e..b815ebf15 100644
--- a/salt/suricata/files/suricataMETA.yaml
+++ b/salt/suricata/files/suricataMETA.yaml
@@ -1,6 +1,11 @@
 %YAML 1.1
 ---
 {%- set interface = salt['pillar.get']('sensor:interface', 'bond0') %}
+{%- if grains['role'] == 'so-eval' %}
+{%- set MTU = "1500"}
+{%- else %}
+{%- set MTU = salt['pillar.get']('sensor:mtu', '1500') %}
+{%- endif %}
 {%- if salt['pillar.get']('sensor:homenet') %}
   {%- set homenet = salt['pillar.get']('sensor:hnsensor', '') %}
 {%- else %}
diff --git a/so-setup-network.sh b/so-setup-network.sh
index 19f6bc23f..c5fa17504 100644
--- a/so-setup-network.sh
+++ b/so-setup-network.sh
@@ -471,6 +471,7 @@ master_pillar() {
     echo "  ls_pipeline_batch_size: 125" >> /opt/so/saltstack/pillar/masters/$HOSTNAME.sls
     echo "  ls_input_threads: 1" >> /opt/so/saltstack/pillar/masters/$HOSTNAME.sls
     echo "  ls_batch_count: 125" >> /opt/so/saltstack/pillar/masters/$HOSTNAME.sls
+    echo "  mtu: 1500" >> /opt/so/saltstack/pillar/masters/$HOSTNAME.sls
   else
     echo "  freq: 0" >> /opt/so/saltstack/pillar/masters/$HOSTNAME.sls
     echo "  domainstats: 0" >> /opt/so/saltstack/pillar/masters/$HOSTNAME.sls