Suricata

In addition to the current behavior of the unix socket interface where PCAP files can be registered for processing by providing it's metadata, it should be possible to write PCAP files (a PCAP structured byte flow) directly onto a unix socket. The processing mode should be continuous (keeping engine states between submitting multiple PCAP files). Also it should be combined with multi-tenant properties (processing more than one file at a time on the unix socket).