Suricata

As discussed at SuriCon Prague, the goal is to start creating a ruleset for traffic classification and flow bypass.

Classification is mostly to add metadata to alerts/flows.

Flow bypass is a performance optimization.

This ticket will likely spin into a separate 'sub project'.