From b7e1989d45754d3e0e1f9aa1dc2cb4df27513d28 Mon Sep 17 00:00:00 2001
From: Josh Patterson <josh.patterson@securityonionsolutions.com>
Date: Thu, 6 Nov 2025 09:49:46 -0500
Subject: [PATCH] resolve block-size not large enough for max fragmented IP
 packet size warning

---
 salt/suricata/defaults.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/salt/suricata/defaults.yaml b/salt/suricata/defaults.yaml
index d819d1cf9..88435a70a 100644
--- a/salt/suricata/defaults.yaml
+++ b/salt/suricata/defaults.yaml
@@ -34,7 +34,7 @@ suricata:
       threads: 1
       tpacket-v3: "yes"
       ring-size: 5000
-      block-size: 32768
+      block-size: 69632
       block-timeout: 10
       use-emergency-flush: "yes"
       buffer-size: 32768