Suricata

When Suricata attaches XDP filter to the NIC, we could not attach another XDP program to the same NIC. with libxdp (also see https://lpc.events/event/7/contributions/671/attachments/561/992/xdp-multiprog.pdf) we can attach multiple XDP programs on the same NIC including suricata's XDP filter, the use cases are users could attach DDOS XDP programs to the same NIC that suricata's XDP filter attaches to, so Suricata does not need to deal with DDOS packet scenario to reduce Suricata's workload.