Suricata

This is especially useful for HTTP2 where there is one magic pattern only in one direction from client to server.

This is useful as probing parsers run only on some ports, when pattern matching runs on all ports.

Otherwise, we get one anomaly APPLAYER_DETECT_PROTOCOL_ONLY_ONE_DIRECTION