mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-07 01:32:47 +01:00
Update soc_suricata.yaml
This commit is contained in:
@@ -188,17 +188,11 @@ suricata:
|
|||||||
advanced: True
|
advanced: True
|
||||||
readonly: True
|
readonly: True
|
||||||
helpLink: suricata.html
|
helpLink: suricata.html
|
||||||
limit:
|
|
||||||
description: File size limit per thread. To determine max PCAP size multiple threads x max-files x limit.
|
|
||||||
helpLink: suricata.html
|
|
||||||
mode:
|
mode:
|
||||||
description: Suricata PCAP mode. Currently only multi is supported.
|
description: Suricata PCAP mode. Currently only multi is supported.
|
||||||
advanced: True
|
advanced: True
|
||||||
readonly: True
|
readonly: True
|
||||||
helpLink: suricata.html
|
helpLink: suricata.html
|
||||||
max-files:
|
|
||||||
description: Max PCAP files per thread. To determine max PCAP size multiple threads x max-files x limit.
|
|
||||||
helpLink: suricata.html
|
|
||||||
use-stream-depth:
|
use-stream-depth:
|
||||||
description: Set to "no" to ignore the stream depth and capture the entire flow. Set this to "yes" to truncate the flow based on the stream depth.
|
description: Set to "no" to ignore the stream depth and capture the entire flow. Set this to "yes" to truncate the flow based on the stream depth.
|
||||||
advanced: True
|
advanced: True
|
||||||
|
|||||||
Reference in New Issue
Block a user