<form>
    <field>
        <id>ids.general.enabled</id>
        <label>Enabled</label>
        <type>checkbox</type>
        <help>Enable intrusion detection system.</help>
    </field>
    <field>
        <id>ids.general.ips</id>
        <label>IPS mode</label>
        <type>checkbox</type>
        <help><![CDATA[Enable protection mode (block traffic).<br />Before enabling, please disable all hardware offloading first <a href="/system_advanced_network.php">in advanced network</a>.]]></help>
    </field>
    <field>
        <id>ids.general.promisc</id>
        <label>Promiscuous mode</label>
        <type>checkbox</type>
        <help><![CDATA[Enable promiscuous mode, for certain setups (like IPS with vlans), this is required to actually capture data on the physical interface.]]></help>
    </field>
    <field>
        <id>ids.general.syslog</id>
        <label>Enable syslog</label>
        <type>checkbox</type>
        <help><![CDATA[Enable syslog, sends alerts (in fast log format) and messages to syslog. This won't change the alert logging used by the product itself.]]></help>
    </field>
    <field>
        <id>ids.general.MPMAlgo</id>
        <label>Pattern matcher</label>
        <type>dropdown</type>
        <help><![CDATA[Select the multi-pattern matcher algorithm to use.]]></help>
    </field>
    <field>
        <id>ids.general.interfaces</id>
        <label>Interfaces</label>
        <type>select_multiple</type>
        <style>tokenize</style>
        <help><![CDATA[Select interface(s) to use. When enabling IPS, only use physical interfaces here (no vlans etc).]]></help>
        <hint>Type or select interface.</hint>
    </field>
    <field>
        <id>ids.general.AlertLogrotate</id>
        <label>Rotate log</label>
        <type>dropdown</type>
        <help><![CDATA[Rotate alert logs at provided interval.]]></help>
    </field>
    <field>
        <id>ids.general.AlertSaveLogs</id>
        <label>Save logs</label>
        <type>text</type>
        <help><![CDATA[Number of logs to keep.]]></help>
    </field>
</form>