From 766bc95e3cb16f1c776f9f099b882ddfbfe847fc Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Tue, 31 May 2016 08:51:15 +0200 Subject: [PATCH] yaml: move classification etc below the rules --- suricata.yaml.in | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/suricata.yaml.in b/suricata.yaml.in index 5ccb138dab..bdd754135a 100644 --- a/suricata.yaml.in +++ b/suricata.yaml.in @@ -47,10 +47,6 @@ vars: ## Step 2: select the rules to enable or disable ## -classification-file: @e_sysconfdir@classification.config -reference-config-file: @e_sysconfdir@reference.config -# threshold-file: @e_sysconfdir@threshold.config - default-rule-path: @e_sysconfdir@rules rule-files: - botcc.rules @@ -104,6 +100,10 @@ rule-files: # - modbus-events.rules # available in suricata sources under rules dir # - app-layer-events.rules # available in suricata sources under rules dir +classification-file: @e_sysconfdir@classification.config +reference-config-file: @e_sysconfdir@reference.config +# threshold-file: @e_sysconfdir@threshold.config + ## ## Step 3: select outputs to enable