Suricata

Something like smtp.headers or perhaps smtp.mime.headers?

As we have for http headers. If it would make sense, also have a .raw version.