CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 10:12:53 +01:00
Code Issues Packages Projects Releases Wiki Activity

remove mmap-locked.

Browse Source
This commit is contained in:
m0duspwnens
2024-03-22 15:55:59 -04:00
parent bb0da2a5c5
commit 81f3d69eb9
3 changed files with 5 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
salt/suricata/defaults.yaml
View File

@@ -33,7 +33,6 @@ suricata:
threads: 1 threads: 1
tpacket-v3: "yes" tpacket-v3: "yes"
ring-size: 5000 ring-size: 5000
mmap-locked: "yes"
block-size: 32768 block-size: 32768
block-timeout: 10 block-timeout: 10
use-emergency-flush: "yes" use-emergency-flush: "yes"

11
salt/suricata/map.jinja
View File

@@ -32,17 +32,16 @@
- interface: {{ GLOBALS.sensor.interface }} - interface: {{ GLOBALS.sensor.interface }}
cluster-id: {{ SURICATAMERGED.config['af-packet']['cluster-id'] }} cluster-id: {{ SURICATAMERGED.config['af-packet']['cluster-id'] }}
cluster-type: {{ SURICATAMERGED.config['af-packet']['cluster-type'] }} cluster-type: {{ SURICATAMERGED.config['af-packet']['cluster-type'] }}
defrag: {{ SURICATAMERGED.config['af-packet'].defrag }} defrag: "{{ SURICATAMERGED.config['af-packet'].defrag }}"
use-mmap: {{ SURICATAMERGED.config['af-packet']['use-mmap'] }} use-mmap: "{{ SURICATAMERGED.config['af-packet']['use-mmap'] }}"
threads: {{ SURICATAMERGED.config['af-packet'].threads }} threads: {{ SURICATAMERGED.config['af-packet'].threads }}
tpacket-v3: {{ SURICATAMERGED.config['af-packet']['tpacket-v3'] }} tpacket-v3: "{{ SURICATAMERGED.config['af-packet']['tpacket-v3'] }}"
ring-size: {{ SURICATAMERGED.config['af-packet']['ring-size'] }} ring-size: {{ SURICATAMERGED.config['af-packet']['ring-size'] }}
mmap-locked: {{ SURICATAMERGED.config['af-packet']['mmap-locked'] }}
block-size: {{ SURICATAMERGED.config['af-packet']['block-size'] }} block-size: {{ SURICATAMERGED.config['af-packet']['block-size'] }}
block-timeout: {{ SURICATAMERGED.config['af-packet']['block-timeout'] }} block-timeout: {{ SURICATAMERGED.config['af-packet']['block-timeout'] }}
use-emergency-flush: {{ SURICATAMERGED.config['af-packet']['use-emergency-flush'] }} use-emergency-flush: "{{ SURICATAMERGED.config['af-packet']['use-emergency-flush'] }}"
buffer-size: {{ SURICATAMERGED.config['af-packet']['buffer-size'] }} buffer-size: {{ SURICATAMERGED.config['af-packet']['buffer-size'] }}
disable-promisc: {{ SURICATAMERGED.config['af-packet']['disable-promisc'] }} disable-promisc: "{{ SURICATAMERGED.config['af-packet']['disable-promisc'] }}"
checksum-checks: {{ SURICATAMERGED.config['af-packet']['checksum-checks'] }} checksum-checks: {{ SURICATAMERGED.config['af-packet']['checksum-checks'] }}
{% endload %} {% endload %}
{% do SURICATAMERGED.config.pop('af-packet') %} {% do SURICATAMERGED.config.pop('af-packet') %}

5
salt/suricata/soc_suricata.yaml
View File

@@ -94,11 +94,6 @@ suricata:
description: Buffer size for packets per thread. description: Buffer size for packets per thread.
forcedType: int forcedType: int
helpLink: suricata.html helpLink: suricata.html
mmap-locked:
description: Prevent swapping by locking the memory map.
advanced: True
regex: ^(yes|no)$
helpLink: suricata.html
block-size: block-size:
description: This must be configured to a sufficiently high value to accommodate a significant number of packets, considering byte size and MTU constraints. Ensure it aligns with a power of 2 and is a multiple of the page size. description: This must be configured to a sufficiently high value to accommodate a significant number of packets, considering byte size and MTU constraints. Ensure it aligns with a power of 2 and is a multiple of the page size.
advanced: True advanced: True