Suricata

We need a build that runs valgrind's leak check on pcaps with rules. Preferably more than one.

This build should fail on any leaked memory detected, which means we first have to fix a bunch of them as we are not clearing all one-time allocations.

Leaks that can't be fixed or are in support libraries should be suppressed.