I propose to keep these ones because we know it is bad. And to add a generic one that is printed when we add an interface: "GRO and/or LRO is activated on %device: this will result in suricata receiving modified traffic and it may cause severe capture issue in most running modes".

Alternative choice is to keep this last one. And to add an option to allow use to get rid of this message if he really know what he's doing.