mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-03-24 13:32:37 +01:00
36 lines
836 B
Plaintext
36 lines
836 B
Plaintext
{% from 'vars/globals.map.jinja' import GLOBALS %}
|
|
{% from 'suricata/map.jinja' import SURICATAMERGED %}
|
|
|
|
# This directory needs to exist regardless of whether SURIPCAP is enabled or not, in order for
|
|
# Sensoroni to mount it
|
|
suripcapdir:
|
|
file.directory:
|
|
- name: /nsm/suripcap
|
|
- user: 940
|
|
- group: 939
|
|
- mode: 775
|
|
- makedirs: True
|
|
|
|
pcapoutdir:
|
|
file.directory:
|
|
- name: /nsm/pcapout
|
|
- user: 939
|
|
- group: 939
|
|
- makedirs: True
|
|
|
|
{% if GLOBALS.pcap_engine in ["SURICATA"] %}
|
|
|
|
{# there should only be 1 interface in af-packet so we can just reference the first list item #}
|
|
{% for i in range(1, SURICATAMERGED.config['af-packet'][0].threads + 1) %}
|
|
|
|
suripcapthread{{i}}dir:
|
|
file.directory:
|
|
- name: /nsm/suripcap/{{i}}
|
|
- user: 940
|
|
- group: 939
|
|
- mode: 775
|
|
|
|
{% endfor %}
|
|
|
|
{% endif %}
|