We usually use a MTU of 1500 + Ethernet header
Signed-off-by: Michael Tremer michael.tremer@ipfire.org --- config/suricata/suricata.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml index d94de87f1..dc1163820 100644 --- a/config/suricata/suricata.yaml +++ b/config/suricata/suricata.yaml @@ -434,7 +434,7 @@ max-pending-packets: 1024 # Preallocated size for packet. Default is 1514 which is the classical # size for pcap on ethernet. You should adjust this value to the highest # packet size (MTU + hardware header) on your system. -#default-packet-size: 1514 +default-packet-size: 1514
# Unix command socket can be used to pass commands to suricata. # An external tool can then connect to get information from suricata