Suricata

With the effort to dedup pcaps, would be nice if createst could detect that the pcap
passed as input is from an existing test, and just add the
pcap: ../path/to/original/pcap.file
argument to test.yaml, instead of adding a new pcap to the test.