CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-04-26 14:37:49 +02:00
Code Issues Packages Projects Releases Wiki Activity

Bro Salt Module - add file syncs

Browse Source
This commit is contained in:
Mike Reeves
2018-03-06 09:41:46 -05:00
parent e519b04a42
commit f3f531afd2
4 changed files with 66 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files
salt/bro/files/local.bro
+1 -1
View File
@@ -122,7 +122,7 @@
@load securityonion/shellshock
#############################
## End SO Scrips Section ##
## End SO Scripts Section ##
#############################
#############################
salt/bro/files/node.cfg
+18 -4
View File
@@ -1,19 +1,33 @@
{%- set interface = salt['pillar.get'](sensor:interface) %}
{%- set lbprocs = salt['pillar.get'](sensor:lbprocs) %}
{%- set interface = salt['pillar.get']('sensor:interface', '') %}
{%- if salt['pillar.get']('sensor:bro_pins')|length > 1 %}
{%- if salt['pillar.get']('sensor:bro_proxies'|length > 1) %}
{%- set proxies = salt['pillar.get']('sensor:bro_proxies') %}
{%- else %}
{%- set proxies = (salt['pillar.get']('sensor:bro_pins')|length/10)|round(0, 'ceil')|int %}
{%- endif %}
[manager]
type=manager
host=localhost
[proxy]
{%- for demproxies in range(proxies) %}
[proxy-{{ demproxies }}]
type=proxy
host=localhost
[sotest-eth1]
[worker-1]
type=worker
host=localhost
interface=af_packet::{{ interface }}
lb_method=custom
{%- if salt['pillar.get']('sensor:bro_lbprocs'|length > 1) %}
lb_procs={{ lbprocs }}
{%- else %}
lb_procs={{ salt['pillar.get']('sensor:bro_pins')|length }}
{%- endif %}
{%- if salt['pillar.get']('sensor:bro_pins'|length > 1) %}
pin_cpus={{ salt['pillar.get']('sensor:bro_pins')|join(", ") }}
{%- endif %}
af_packet_fanout_id=23
af_packet_fanout_mode=AF_Packet::FANOUT_HASH
af_packet_buffer_size=128*1024*1024