-
Notifications
You must be signed in to change notification settings - Fork 515
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #11303 from Security-Onion-Solutions/dougburks-pat…
…ch-1 FIX: SOC Config pcap doc links should point to steno docs #11302
- Loading branch information
Showing
1 changed file
with
9 additions
and
9 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,35 +1,35 @@ | ||
pcap: | ||
enabled: | ||
description: You can enable or disable Stenographer on all sensors or a single sensor. | ||
helpLink: pcap.html | ||
helpLink: stenographer.html | ||
config: | ||
maxdirectoryfiles: | ||
description: The maximum number of packet/index files to create before deleting old files. | ||
helpLink: pcap.html | ||
helpLink: stenographer.html | ||
diskfreepercentage: | ||
description: The disk space percent to always keep free for PCAP | ||
helpLink: pcap.html | ||
helpLink: stenographer.html | ||
blocks: | ||
description: The number of 1MB packet blocks used by AF_PACKET to store packets in memory, per thread. You shouldn't need to change this. | ||
advanced: True | ||
helpLink: pcap.html | ||
helpLink: stenographer.html | ||
preallocate_file_mb: | ||
description: File size to pre-allocate for individual PCAP files. You shouldn't need to change this. | ||
advanced: True | ||
helpLink: pcap.html | ||
helpLink: stenographer.html | ||
aiops: | ||
description: The max number of async writes to allow at once. | ||
advanced: True | ||
helpLink: pcap.html | ||
helpLink: stenographer.html | ||
pin_to_cpu: | ||
description: Enable CPU pinning for PCAP. | ||
advanced: True | ||
helpLink: pcap.html | ||
helpLink: stenographer.html | ||
cpus_to_pin_to: | ||
description: CPU to pin PCAP to. Currently only a single CPU is supported. | ||
advanced: True | ||
helpLink: pcap.html | ||
helpLink: stenographer.html | ||
disks: | ||
description: List of disks to use for PCAP. This is currently not used. | ||
advanced: True | ||
helpLink: pcap.html | ||
helpLink: stenographer.html |