Suricata

Saving this as a question because we have to consider what are the implications of doing this, and how it should be done:
- should unknown messages be stored in existing transactions?
- or should they go to a newly created one?

Understand at least the initial consequences of each approach, and then decide if and when to log any info for unknown message types for pgsql.