Suricata

This can be fairly easily reproduced by sending traffic with AFPacket V3 enabled.

I first confirm traffic is being send (`tcpdump -ni <dev>`)
And then confirm suricata is seeting/processing the packets (`tail -F /var/log/suricata/stats.log | grep -E "kernel|decode`)

I then artifical flap the NIC (`ip link set <dev> down; sleep 1; ip link set <dev> up`)

At this point, traffic is still going through the NIC, but Suricata isn't seeing it.

I've tracked this down to a missing AFPDerefSocket call inside the AFPReleasePacketV3 function.