You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: source/manual/ips.rst
+3-3Lines changed: 3 additions & 3 deletions
Original file line number
Diff line number
Diff line change
@@ -87,7 +87,7 @@ IPS mode When enabled, the system can drop suspicio
87
87
work, your network card needs to support netmap.
88
88
The action for a rule needs to be "drop" in order to discard the packet,
89
89
this can be configured per rule or ruleset (using an input filter)
90
-
Promiscuous mode Listen to traffic in promiscuous mode. (all packets in stead of only the
90
+
Promiscuous mode Listen to traffic in promiscuous mode. (all packets instead of only the
91
91
ones addressed to this network interface)
92
92
Enable syslog alerts Send alerts to syslog, using fast log format
93
93
Enable eve syslog output Send alerts in EVE_ format to syslog, using log level info.
@@ -97,8 +97,8 @@ Enable eve syslog output Send alerts in EVE_ format to syslog, usin
97
97
Pattern matcher Controls the pattern matcher algorithm.
98
98
Aho–Corasick is the default. On supported platforms, Hyperscan is the best option.
99
99
On commodity hardware if Hyperscan is not available the suggested setting is "Aho–Corasick Ken Steele variant" as it performs better than "Aho–Corasick".
100
-
Interfaces Interfaces to protect. When in IPS mode, this need to be real interfaces
101
-
supporting netmap. (when using VLAN's, enable IPS on the parent)
100
+
Interfaces Interfaces to protect. When in IPS mode, this needs to be real interfaces
101
+
supporting netmap. (when using VLANs, enable IPS on the parent)
102
102
Rotate log Log rotating frequency, also used for the internal event logging
0 commit comments