From 2bcd48bc1200827d70c2e53982fa7901faac6176 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Wed, 30 Jul 2014 11:00:53 +0200 Subject: [PATCH] pcap-log: yaml comment update --- suricata.yaml.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/suricata.yaml.in b/suricata.yaml.in index fd985dc4af..7493d0e448 100644 --- a/suricata.yaml.in +++ b/suricata.yaml.in @@ -206,7 +206,7 @@ outputs: # If set to a value will enable ring buffer mode. Will keep Maximum of "max-files" of size "limit" max-files: 2000 - mode: normal # normal or sguil. + mode: normal # normal, multi or sguil. #sguil-base-dir: /nsm_data/ #ts-format: usec # sec or usec second format (default) is filename.sec usec is filename.sec.usec use-stream-depth: no #If set to "yes" packets seen after reaching stream inspection depth are ignored. "no" logs all packets