pcap: add new config style

13 years ago · c3c20dd041
parent 78467f1846
commit c3c20dd041
1 changed files with 5 additions and 0 deletions
--- a/suricata.yaml
+++ b/suricata.yaml
@ -552,6 +552,11 @@ pfring:
  #  cluster-id: 93
  #  cluster-type: cluster_flow

+pcap:
+  - interface: eth0
+    #buffer-size: 32768
+    #bpf-filter: "tcp and port 25"
+
 # For FreeBSD ipfw(8) divert(4) support.
 # Please make sure you have ipfw_load="YES" and ipdivert_load="YES"
 # in /etc/loader.conf or kldload'ing the appropriate kernel modules.