Suricata

Add a new buffer, dns.query.name to allow matches on the "name" field in the DNS queries array.

Unlike the exiting dns.query_name buffer, this will look at the request and the response and flow keyword can be used to limit its scope.

In the to server direction this is a duplication of the existing dns.query_name keyword, however, there is an expectation that the keyword only detects in the to server direction, and extending it to match in the to client direction could cause a large number of unexpected alerts.