VMware ESXi tuning for Suricata?

[richardm]

I've seen the guidance for disabling CRC/TSO/LSO within OPNsense when running an IDS.

What about NIC parameters at the ESXi level?  TSO can be killed globally with Net.UseHwTSO.  Should I be looking into other ESXi params as well?  I've been seeing IDS alerts similar to the ones normally blamed on TSO...