From 029d8a0e8fd50c3ffa75a04572d15e6c10c60202 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Mon, 25 Mar 2024 09:30:41 -0400
Subject: [PATCH] handle yes/no on checksum-checks

---
 salt/suricata/map.jinja | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/salt/suricata/map.jinja b/salt/suricata/map.jinja
index 55c9aab4c..2a3adf5f1 100644
--- a/salt/suricata/map.jinja
+++ b/salt/suricata/map.jinja
@@ -42,7 +42,11 @@
   use-emergency-flush: "{{ SURICATAMERGED.config['af-packet']['use-emergency-flush'] }}"
   buffer-size: {{ SURICATAMERGED.config['af-packet']['buffer-size'] }}
   disable-promisc: "{{ SURICATAMERGED.config['af-packet']['disable-promisc'] }}"
+{%   if SURICATAMERGED.config['af-packet']['checksum-checks'] in ['yes', 'no'] %}
+  checksum-checks: "{{ SURICATAMERGED.config['af-packet']['checksum-checks'] }}"
+{%   else %}
   checksum-checks: {{ SURICATAMERGED.config['af-packet']['checksum-checks'] }}
+{%   endif %}
 {% endload %}
 {% do SURICATAMERGED.config.pop('af-packet') %}
 {% do SURICATAMERGED.config.update({'af-packet': afpacket}) %}