Update yaml size params to use kb, mb, gb to indicate size, in place of raw bytes

remotes/origin/master-1.2.x
Anoop Saldanha 15 years ago committed by Victor Julien
parent e0c13434ef
commit 52b37fef3e

@ -56,8 +56,9 @@ outputs:
enabled: yes enabled: yes
filename: unified2.alert filename: unified2.alert
# Limit in MB. # File size limit. Can be specified in kb, mb, gb. Just a number
#limit: 32 # is parsed as bytes.
#limit: 32mb
# a line based log of HTTP requests (no alerts) # a line based log of HTTP requests (no alerts)
- http-log: - http-log:
@ -90,7 +91,8 @@ outputs:
enabled: no enabled: no
filename: log.pcap filename: log.pcap
# Limit in MB. # File size limit. Can be specified in kb, mb, gb. Just a number
# is parsed as bytes.
limit: 1000 limit: 1000
# If set to a value will enable ring buffer mode. Will keep Maximum of "max_files" of size "limit" # If set to a value will enable ring buffer mode. Will keep Maximum of "max_files" of size "limit"
@ -325,6 +327,7 @@ cuda:
packet_buffer_limit: 2400 packet_buffer_limit: 2400
# The maximum length for a packet that we would buffer to the gpu. # The maximum length for a packet that we would buffer to the gpu.
# Anything over this is MPM'ed on the CPU. All entries > 0 are valid. # Anything over this is MPM'ed on the CPU. All entries > 0 are valid.
# Can be specified in kb, mb, gb. Just a number indicates it's in bytes.
packet_size_limit: 1500 packet_size_limit: 1500
# No of packet buffers we initialize. All entries > 0 are valid. # No of packet buffers we initialize. All entries > 0 are valid.
packet_buffers: 10 packet_buffers: 10
@ -417,9 +420,11 @@ pattern-matcher:
# the emergency bit and it will try again with more agressive timeouts. # the emergency bit and it will try again with more agressive timeouts.
# If that doesn't work, then it will try to kill the last time seen flows # If that doesn't work, then it will try to kill the last time seen flows
# not in use. # not in use.
# The memcap can be specified in kb, mb, gb. Just a number indicates it's
# in bytes.
flow: flow:
memcap: 33554432 memcap: 32mb
hash_size: 65536 hash_size: 65536
prealloc: 10000 prealloc: 10000
emergency_recovery: 30 emergency_recovery: 30
@ -472,7 +477,8 @@ flow-timeouts:
# engine is configured. # engine is configured.
# #
# stream: # stream:
# memcap: 33554432 # 32mb tcp session memcap # memcap: 32mb # Can be specified in kb, mb, gb. Just a
# # number indicates it's in bytes.
# checksum_validation: yes # To validate the checksum of received # checksum_validation: yes # To validate the checksum of received
# # packet. If csum validation is specified as # # packet. If csum validation is specified as
# # "yes", then packet with invalid csum will not # # "yes", then packet with invalid csum will not
@ -487,19 +493,24 @@ flow-timeouts:
# inline: no # stream inline mode # inline: no # stream inline mode
# #
# reassembly: # reassembly:
# memcap: 67108864 # 64mb tcp reassembly memcap # memcap: 64mb # Can be specified in kb, mb, gb. Just a number
# depth: 1048576 # 1 MB reassembly depth # # indicates it's in bytes.
# depth: 1mb # Can be specified in kb, mb, gb. Just a number
# # indicates it's in bytes.
# toserver_chunk_size: 2560 # inspect raw stream in chunks of at least # toserver_chunk_size: 2560 # inspect raw stream in chunks of at least
# # this size # # this size. Can be specified in kb, mb,
# # gb. Just a number indicates it's in bytes.
# toclient_chunk_size: 2560 # inspect raw stream in chunks of at least # toclient_chunk_size: 2560 # inspect raw stream in chunks of at least
# # this size # # this size. Can be specified in kb, mb,
# # gb. Just a number indicates it's in bytes.
stream: stream:
memcap: 33554432 # 32mb memcap: 32mb
checksum_validation: yes # reject wrong csums checksum_validation: yes # reject wrong csums
inline: no # no inline mode inline: no # no inline mode
reassembly: reassembly:
memcap: 67108864 # 64mb for reassembly memcap: 64mb
depth: 1048576 # reassemble 1mb into a stream depth: 1mb # reassemble 1mb into a stream
toserver_chunk_size: 2560 toserver_chunk_size: 2560
toclient_chunk_size: 2560 toclient_chunk_size: 2560
@ -768,7 +779,9 @@ libhtp:
default-config: default-config:
personality: IDS personality: IDS
request-body-limit: 3072 # Can be specified in kb, mb, gb. Just a number indicates
# it's in bytes.
request_body_limit: 3072
response-body-limit: 3072 response-body-limit: 3072
server-config: server-config:
@ -776,7 +789,9 @@ libhtp:
- apache: - apache:
address: [192.168.1.0/24, 127.0.0.0/8, "::1"] address: [192.168.1.0/24, 127.0.0.0/8, "::1"]
personality: Apache_2_2 personality: Apache_2_2
request-body-limit: 4096 # Can be specified in kb, mb, gb. Just a number indicates
# it's in bytes.
request_body_limit: 4096
response-body-limit: 4096 response-body-limit: 4096
- iis7: - iis7:
@ -784,7 +799,9 @@ libhtp:
- 192.168.0.0/24 - 192.168.0.0/24
- 192.168.10.0/24 - 192.168.10.0/24
personality: IIS_7_0 personality: IIS_7_0
request-body-limit: 4096 # Can be specified in kb, mb, gb. Just a number indicates
# it's in bytes.
request_body_limit: 4096
response-body-limit: 4096 response-body-limit: 4096
# Profiling settings. Only effective if Suricata has been built with the # Profiling settings. Only effective if Suricata has been built with the

Loading…
Cancel
Save