Suricata

Flowbits can make a packet (stateless) rule become stateful (requiring flow) without
even changing the rule type.

Have the engine analyzer report when this happens, to increase visibility.