Suricata

Currently we use the old API for nfqueue. Example code: https://git.netfilter.org/libnetfilter_queue/tree/examples/nf-queue.c

This API should be faster, and gives more flexibility. For example #808 depends on this.