mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-26 02:43:11 +01:00
13 lines
613 B
YAML
13 lines
613 B
YAML
pcap:
|
|
config:
|
|
enabled:
|
|
description: Enable or Disable Stenographer on all sensors or a single sensor
|
|
maxfiles:
|
|
description: The maximum number of packet/index files to create before cleaning old ones up.
|
|
diskfreepercentage:
|
|
description: The disk space percent to always keep free for pcap
|
|
blocks:
|
|
description: The number of 1MB packet blocks used by AF_PACKET to store packets in memory, per thread. You shouldn't need to change this.
|
|
preallocate_file_mb:
|
|
description: File size to pre-allocate for individual pcap files. You shouldn't need to change this.
|