securityonion/salt/bpf/soc_bpf.yaml

bpf:
  pcap:
    description: List of BPF filters to apply to PCAP.
  suricata:
    description: List of BPF filters to apply to Suricata.
  zeek:
    description: List of BPF filters to apply to Zeek.