Suricata

This proposed patch adds a single element in a http json object, adding the port to the "http" object with the key "http_port". Note that this item will be set only if the port is set in the hostname and it's not grabbed from the TCP flow.

Attached a pcap with the http port 1337 (as evident, the flow is actually on TCP port 80, but the hostname has port 1337 => "dest_port": will be set to 80, while http.http_port will be set to 1337).