From d7693f9b555704b030d2da6cfa71128c81dff04f Mon Sep 17 00:00:00 2001
From: Jason Ertel <jason.ertel@securityonionsolutions.com>
Date: Mon, 22 Jun 2020 08:27:43 -0400
Subject: [PATCH] Expose pcap dir to sensoroni for epoch discovery

---
 salt/pcap/init.sls | 1 +
 1 file changed, 1 insertion(+)

diff --git a/salt/pcap/init.sls b/salt/pcap/init.sls
index 02a2e23d8..bcf09b765 100644
--- a/salt/pcap/init.sls
+++ b/salt/pcap/init.sls
@@ -150,6 +150,7 @@ so-sensoroni:
     - network_mode: host
     - binds:
       - /opt/so/conf/steno/certs:/etc/stenographer/certs:rw
+      - /nsm/pcap:/nsm/pcap:rw
       - /nsm/pcapout:/nsm/pcapout:rw
       - /opt/so/conf/sensoroni/sensoroni.json:/opt/sensoroni/sensoroni.json:ro
       - /opt/so/log/sensoroni:/opt/sensoroni/logs:rw