pcap:
  config:
    enabled: 
      description: Enable or Disable Stenographer on all sensors or a single sensor
    maxfiles:
      description: The maximum number of packet/index files to create before cleaning old ones up. 
    diskfreepercentage:
      description: The disk space percent to always keep free for pcap
    blocks:
      description: The number of 1MB packet blocks used by AF_PACKET to store packets in memory, per thread. You shouldn't need to change this. 
    preallocate_file_mb:
      description: File size to pre-allocate for individual pcap files. You shouldn't need to change this.