From f1e3d636d912a79b72ea0492b0f66834c04f452f Mon Sep 17 00:00:00 2001
From: Victor Julien <victor@inliniac.net>
Date: Thu, 24 Mar 2011 12:33:06 +0100
Subject: [PATCH] Add limit option to pcap-log logging config.

---
 suricata.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/suricata.yaml b/suricata.yaml
index d9968efa8e..d6c65ceedb 100644
--- a/suricata.yaml
+++ b/suricata.yaml
@@ -73,9 +73,14 @@ outputs:
       filename: http.log
       append: yes
 
+  # Packet log... log packets in pcap format.
   - pcap-log:
       enabled:  no
       filename: log.pcap
+
+      # Limit in MB.
+      #limit: 32
+
   # a full alerts log containing much information for signature writers
   # or for investigating suspected false positives.
   - alert-debug: