Feature #1234: nfqueue: use mnl API
Support the new GSO-avoidance NFQ feature
Florian Westphal has recently submitted a patchset that allow kernel not to split big packet received by network card. This provides a performance boost.
The patchset is available here: http://www.spinics.net/lists/netfilter-devel/msg26029.html
Suricata should support this to increase its performance in IPS mode.