Update configuration file to new pfring format.

suricata.yaml

@@ -530,21 +530,27 @@ logging:
 # PF_RING configuration. for use with native PF_RING support
 # for more info see http://www.ntop.org/PF_RING.html
 pfring:
-  # Number of receive threads (>1 will enable experimental flow pinned
-  # runmode)
-  threads: 1
-
-  # Default interface we will listen on.
-  interface: eth0
-
-  # Default clusterid.  PF_RING will load balance packets based on flow.
-  # All threads/processes that will participate need to have the same
-  # clusterid.
-  cluster-id: 99
-
-  # Default PF_RING cluster type. PF_RING can load balance per flow or per hash.
-  # This is only supported in versions of PF_RING > 4.1.1.
-  cluster-type: cluster_round_robin
+  - interface: eth0
+    # Number of receive threads (>1 will enable experimental flow pinned
+    # runmode)
+    threads: 1
+  
+    # Default interface we will listen on.
+    interface: eth0
+  
+    # Default clusterid.  PF_RING will load balance packets based on flow.
+    # All threads/processes that will participate need to have the same
+    # clusterid.
+    cluster-id: 99
+  
+    # Default PF_RING cluster type. PF_RING can load balance per flow or per hash.
+    # This is only supported in versions of PF_RING > 4.1.1.
+    cluster-type: cluster_round_robin
+  # Second interface
+  #- interface: eth1
+  #  threads: 3
+  #  cluster-id: 93
+  #  cluster-type: cluster_flow
 
 # For FreeBSD ipfw(8) divert(4) support.
 # Please make sure you have ipfw_load="YES" and ipdivert_load="YES"