Suricata

Description: extract message body from smtp data.currently this feature is missed.
1. add a config item to enable it or not in suricata.yaml
2. output message body to eve.json

```
smtp:
enabled: no
raw-extraction: no # Configure SMTP-MIME Decoder
mime: # Decode MIME messages from SMTP transactions # (may be resource intensive) # This field supersedes all others because it turns the entire # process on or off
decode-mime: no

1. Decode MIME entity bodies (ie. Base64, quoted-printable, etc.)
   decode-base64: no
   decode-quoted-printable: no

1. Maximum bytes per header data value stored in the data structure
2. (default is 2000)
   header-value-depth: 2000

1. Extract URLs and save in state data structure
   extract-urls: no
2. Scheme of URLs to extract
3. (default is [http])
   #extract-urls-schemes: [http, https, ftp, mailto]
4. Log the scheme of URLs that are extracted
5. (default is no)
   #log-url-scheme: yes
6. Set to yes to compute the md5 of the mail body. You will then
7. be able to journalize it.
   body: yes ----> to enable or disbale it
   body-md5: yes
   ```