Network card, Netmap and Suricata Inline mode

Suricata has two modes for filtering, “Legacy” and “Inline”. “Legacy” leaks packets onto internal network while “Inline” doesn’t. I have no knowledge of networking whatsoever and I can’t even begin to determine if “Legacy” mode would be a concern enough to warrant a move to “Inline” mode instead.

Obviously my uniformed knee-jerk reaction to this is to select “Inline” mode and when I do a text unfolds below the option box that tells me that my network card needs to support something called “Netmap”. Ok fair enough. I try to find out what my network card model and make are and any information pertaining to this “Netmap” compatibility and it s a total fail.

If anyone know anything about this and would like to lend a brain, please feel free to drop a comment. The network cards I have available inside the machine running pfSense are:

1 x Intel I219-LM PHY Gigabit LAN (iAMT 11.0)
7 x Intel I211-AT PCI-E Gigabit LAN
2 x Intel i350

did you ever get this working?