diff mbox series

[03/20] suricata: Set default packet size to 1514

Message ID	20190228142825.5153-4-michael.tremer@ipfire.org
State	Accepted
Commit	9f726f8f536fb271e00c51ca7d10dac143dd3045
Headers	From: Michael Tremer <michael.tremer@ipfire.org> To: development@lists.ipfire.org Subject: [PATCH 03/20] suricata: Set default packet size to 1514 Date: Thu, 28 Feb 2019 14:28:08 +0000 Message-Id: <20190228142825.5153-4-michael.tremer@ipfire.org> In-Reply-To: <20190228142825.5153-1-michael.tremer@ipfire.org> References: <20190228142825.5153-1-michael.tremer@ipfire.org> Cc: Michael Tremer <michael.tremer@ipfire.org> Precedence: list Errors-To: development-bounces@lists.ipfire.org Sender: "Development" <development-bounces@lists.ipfire.org>
Series	Suricata Configuration Updates \| [00/20] Suricata Configuration Updates [01/20] Revert "Suricata: detect DNS events on port 853, too" [02/20] suricata: Set max-pending-packets to 1024 [03/20] suricata: Set default packet size to 1514 [04/20] suricata: Set detection profile to high [05/20] suricata: Drop profiling section from configuration [06/20] suricata: Drop some commented stuff from configuration [07/20] suricata: Drop sections that require Rust [08/20] suricata: Configure HTTP decoder [09/20] suricata: Allow 32MB of RAM for DNS decoding [10/20] suricata: Drop parsers I have never heard of [11/20] suricata: We do not use any IP reputation lists [12/20] suricata: Log to syslog [13/20] suricata: Use the correct path for the magic database [14/20] suricata: Use 64MB of RAM for defragmentation [15/20] suricata: Use up to 256MB of RAM for the flow cache [16/20] suricata: Log to syslog like a normal process [17/20] suricata: Increase memory size for the stream engine [18/20] suricata: Disable decoding for Teredo [19/20] suricata: Start capture first and then load rules [20/20] suricata: Fix syntax error

Commit Message

Michael Tremer March 1, 2019, 1:28 a.m. UTC

  We usually use a MTU of 1500 + Ethernet header

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---
 config/suricata/suricata.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff mbox series

Patch

diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml
index d94de87f1..dc1163820 100644
--- a/config/suricata/suricata.yaml
+++ b/config/suricata/suricata.yaml
@@ -434,7 +434,7 @@  max-pending-packets: 1024
 # Preallocated size for packet. Default is 1514 which is the classical
 # size for pcap on ethernet. You should adjust this value to the highest
 # packet size (MTU + hardware header) on your system.
-#default-packet-size: 1514
+default-packet-size: 1514
 
 # Unix command socket can be used to pass commands to suricata.
 # An external tool can then connect to get information from suricata