aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

yaml: explicitly mention exception policy in conf

Browse Source 
While our documentation indicated what were the possible configuration
settings for exception policies, our yaml only explicitly mentioned
exception policy for the master switch. Clearly indicate which config
settings are about exception policies.

Related to
Task #5816
pull/10805/head
Juliana Fajardini 2 years ago committed by Victor Julien
parent 514e8b8b04
commit 8defee93b2
1 changed files with 16 additions and 16 deletions
Show Stats Download Patch File Download Diff File

32
suricata.yaml.in
Unescape Escape View File

@ -854,9 +854,9 @@ pcap-file:
# Configure the app-layer parsers. # Configure the app-layer parsers.
# #
# The error-policy setting applies to all app-layer parsers. Values can be # The exception policy error-policy setting applies to all app-layer parsers.
# "drop-flow", "pass-flow", "bypass", "drop-packet", "pass-packet", "reject" or # Values can be "drop-flow", "pass-flow", "bypass", "drop-packet", "pass-packet",
# "ignore" (the default). # "reject" or "ignore" (the default).
# #
# The protocol's section details each protocol. # The protocol's section details each protocol.
# #
@ -1380,8 +1380,8 @@ host-os-policy:
# Defrag settings: # Defrag settings:
# The memcap-policy value can be "drop-packet", "pass-packet", "reject" or # The exception policy memcap-policy value can be "drop-packet", "pass-packet",
# "ignore" (which is the default). # "reject" or "ignore" (which is the default).
defrag: defrag:
memcap: 32mb memcap: 32mb
# memcap-policy: ignore # memcap-policy: ignore
@ -1424,8 +1424,8 @@ defrag:
# last time seen flows. # last time seen flows.
# The memcap can be specified in kb, mb, gb. Just a number indicates it's # The memcap can be specified in kb, mb, gb. Just a number indicates it's
# in bytes. # in bytes.
# The memcap-policy can be "drop-packet", "pass-packet", "reject" or "ignore" # The exception policy memcap-policy can be "drop-packet", "pass-packet",
# (which is the default). # "reject" or "ignore" (which is the default).
flow: flow:
memcap: 128mb memcap: 128mb
@ -1508,9 +1508,9 @@ flow-timeouts:
# stream: # stream:
# memcap: 64mb # Can be specified in kb, mb, gb. Just a # memcap: 64mb # Can be specified in kb, mb, gb. Just a
# # number indicates it's in bytes. # # number indicates it's in bytes.
# memcap-policy: ignore # Can be "drop-flow", "pass-flow", "bypass", # memcap-policy: ignore # The exception policy value can be "drop-flow",
# # "drop-packet", "pass-packet", "reject" or # # "pass-flow", "bypass", "drop-packet",
# # "ignore" default is "ignore" # # "pass-packet", "reject" or "ignore" default is "ignore"
# checksum-validation: yes # To validate the checksum of received # checksum-validation: yes # To validate the checksum of received
# # packet. If csum validation is specified as # # packet. If csum validation is specified as
# # "yes", then packets with invalid csum values will not # # "yes", then packets with invalid csum values will not
@ -1522,9 +1522,9 @@ flow-timeouts:
# # option # # option
# prealloc-sessions: 2048 # 2k sessions prealloc'd per stream thread # prealloc-sessions: 2048 # 2k sessions prealloc'd per stream thread
# midstream: false # don't allow midstream session pickups # midstream: false # don't allow midstream session pickups
# midstream-policy: ignore # Can be "drop-flow", "pass-flow", "bypass", # midstream-policy: ignore # The exception policy value can be "drop-flow",
# # "drop-packet", "pass-packet", "reject" or # # "pass-flow", "bypass", "drop-packet",
# # "ignore" default is "ignore" # # "pass-packet", "reject" or "ignore" default is "ignore"
# async-oneside: false # don't enable async stream handling # async-oneside: false # don't enable async stream handling
# inline: no # stream inline mode # inline: no # stream inline mode
# drop-invalid: yes # in inline mode, drop packets that are invalid with regards to streaming engine # drop-invalid: yes # in inline mode, drop packets that are invalid with regards to streaming engine
@ -1539,9 +1539,9 @@ flow-timeouts:
# reassembly: # reassembly:
# memcap: 256mb # Can be specified in kb, mb, gb. Just a number # memcap: 256mb # Can be specified in kb, mb, gb. Just a number
# # indicates it's in bytes. # # indicates it's in bytes.
# memcap-policy: ignore # Can be "drop-flow", "pass-flow", "bypass", # memcap-policy: ignore # The exception policy value can be "drop-flow",
# # "drop-packet", "pass-packet", "reject" or # # "pass-flow", "bypass", "drop-packet", "pass-packet",
# # "ignore" default is "ignore" # # "reject" or "ignore" default is "ignore"
# depth: 1mb # Can be specified in kb, mb, gb. Just a number # depth: 1mb # Can be specified in kb, mb, gb. Just a number
# # indicates it's in bytes. # # indicates it's in bytes.
# toserver-chunk-size: 2560 # inspect raw stream in chunks of at least # toserver-chunk-size: 2560 # inspect raw stream in chunks of at least

Write Preview
Loading…
Cancel
Save