pcap = on interfaces = span0 process_incoming_traffic = on process_outgoing_traffic = off enable_connection_tracking = off enable_ban = on ban_time = 30 unban_only_if_attack_finished = on notify_script_path = /usr/local/bin/fastnetmon.py notify_script_pass_details = on ban_details_records_count = 0 collect_attack_pcap_dumps = off process_pcap_attack_dumps_with_dpi = off ban_for_pps = on ban_for_bandwidth = on ban_for_flows = off threshold_pps = 20000 threshold_mbps = 1000