webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-28 11:43:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

suricata: Set most significant bit as repeat marker

Browse Source 
I have no idea why some odd value was chosen here, but one bit should be
enough.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Tested-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
This commit is contained in:
Michael Tremer
2021-10-18 10:10:14 +00:00
committed by Arne Fitzenreiter
parent aaf266ac2b
commit 761fadbdde
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
config/suricata/suricata.yaml
View File

@@ -346,8 +346,8 @@ logging:
nfq: nfq:
mode: repeat mode: repeat
repeat-mark: 1879048192 repeat-mark: 2147483648
repeat-mask: 1879048192 repeat-mask: 2147483648
# bypass-mark: 1 # bypass-mark: 1
# bypass-mask: 1 # bypass-mask: 1
# route-queue: 2 # route-queue: 2

4
src/initscripts/system/suricata
View File

@@ -35,8 +35,8 @@ network_zones=( red green blue orange ovpn )
enabled_ips_zones=() enabled_ips_zones=()
# Mark and Mask options. # Mark and Mask options.
MARK="0x70000000" MARK="0x80000000"
MASK="0x70000000" MASK="0x80000000"
# PID file of suricata. # PID file of suricata.
PID_FILE="/var/run/suricata.pid" PID_FILE="/var/run/suricata.pid"