From 9a5a628bca714b025a240e06a13d079965bc8559 Mon Sep 17 00:00:00 2001
From: Ad Schellevis <ad@opnsense.org>
Date: Wed, 18 Nov 2015 20:13:36 +0000
Subject: [PATCH] (IDS) disable promisc mode when using netmap

---
 src/opnsense/service/templates/OPNsense/IDS/suricata.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/opnsense/service/templates/OPNsense/IDS/suricata.yaml b/src/opnsense/service/templates/OPNsense/IDS/suricata.yaml
index 816192a3b..6d3af23ec 100644
--- a/src/opnsense/service/templates/OPNsense/IDS/suricata.yaml
+++ b/src/opnsense/service/templates/OPNsense/IDS/suricata.yaml
@@ -311,7 +311,7 @@ netmap:
   - interface: default
     threads: auto
     copy-mode: ips
-    disable-promisc: no
+    disable-promisc: yes
     checksum-checks: auto
 
     {% for intfName in OPNsense.IDS.general.interfaces.split(',') %}