Suricata

Current logic is

    let (bi, _) = crlf.parse(phi)?;
    let body_offset = oi.len() - bi.len();
    let (i, body) = opt(sdp_parse_message).parse(bi)?;
    Ok((
        i,

But we should first take content-length to have enough input for SDP
and we we should have the remainder returned depend on wether this was SDP or not, rather just take the content-length, and have what starts after be the next request