Posted by user8446 on Oct 23, 2017; 2:18am
URL: https://itus.accessinnov.com/snort-2-9-9-0-2-config-files-check-tp1478p1490.html

You want
config detection: search-method ac-nq split-any-any search-optimize max-pattern-len 18 no_stream_inserts

Good catch on noticing that the NFQ packet acquisition module is gone. The developer that did the upgrade was working off of the bridge mode image which uses AFPACKET instead so he didn't include it. You just have to add it back in. I remember Itus saying NFQ was faster for router mode and AFPACKET was faster for bridge mode in their testing.
Have you noticed anything else in router? I've only been using bridge but it's rock solid with no reboots, errors, issues, nothing.