Suricata

After fixing #7414, the next issue is that a default alert record for a bad ipv4 packet is mostly useless:

{
  "timestamp": "2024-11-26T09:45:26.928787+0000",
  "alert": {
    "action": "allowed",
    "gid": 1,
    "signature_id": 2200005,
    "rev": 2,
    "signature": "SURICATA IPv4 invalid option length",
    "category": "Generic Protocol Command Decode",
    "severity": 3
  }
}