Adds a configuration example for nflog support in suricata.yaml

pull/976/merge
Giuseppe Longo 12 years ago committed by Victor Julien
parent 4851568a41
commit 62aaae24fd

@ -290,6 +290,23 @@ nfq:
# batchcount: 20 # batchcount: 20
# fail-open: yes # fail-open: yes
#nflog support
nflog:
# netlink multicast group
# (the same as the iptables --nflog-group param)
# Group 0 is used by the kernel, so you can't use it
- group: 2
# netlink buffer size
buffer-size: 18432
# put default value here
- group: default
# set number of packet to queue inside kernel
qthreshold: 1
# set the delay before flushing packet in the queue inside kernel
qtimeout: 100
# netlink max buffer size
max-size: 20000
# af-packet support # af-packet support
# Set threads to > 1 to use PACKET_FANOUT support # Set threads to > 1 to use PACKET_FANOUT support
af-packet: af-packet:

Loading…
Cancel
Save