# Default config for Suricata

# set to yes to start the server in the init.d script
RUN=yes

# set to user that will run suricata in the init.d script (used for dropping privileges only)
RUN_AS_USER=suricata

# Configuration file to load
SURCONF=/etc/suricata/suricata.yaml

# Listen mode: pcap, nfqueue, custom_nfqueue or af-packet
# depending on this value, only one of the two following options
# will be used (af-packet uses neither).
# Please note that IPS mode is only available when using nfqueue
LISTENMODE=pfring

# Interface to listen on (for pcap mode)
IFACE=ens33

# Queue number to listen on (for nfqueue mode)
#NFQUEUE="-q 0"

# Queue numbers to listen on (for custom_nfqueue mode)
# Multiple queues can be specified
#CUSTOM_NFQUEUE="-q 0 -q 1 -q 2 -q 3"

# Pid file
PIDFILE=/var/run/suricata.pid