I reinstalled above parameter, does somebody know if its already in or would this be helpful?
I saw this optimization according to a reinstall of suricata.
Roger
You can test it, but it will stay disabled on default installs:
https://forum.opnsense.org/index.php?topic=5595.0
https://www.freebsd.org/cgi/man.cgi?bpf(4)