yaml: add and comment missing dns settings

DNS memcap settings "global-memcap" and "state-memcap" were missing. Additionally, add request-flood setting.
11 years ago · d2a6b61d76
parent 2421da6eec
commit d2a6b61d76
1 changed files with 8 additions and 0 deletions
--- a/suricata.yaml.in
+++ b/suricata.yaml.in
@ -1098,6 +1098,14 @@ app-layer:
    #smb2:
    #  enabled: yes
    dns:
+      # memcaps. Globally and per flow/state.
+      #global-memcap: 16mb
+      #state-memcap: 512kb
+
+      # How many unreplied DNS requests are considered a flood.
+      # If the limit is reached, app-layer-event:dns.flooded; will match.
+      #request-flood: 500
+
      tcp:
        enabled: yes
        detection-ports: