Suricata

Library users should be able to feed already-reassembled application data into Suricata without constructing synthetic TCP/IP packets or emulating TCP state.

This is useful for proxies, ICAP services, and other applications that already handle transport and may expose decrypted content. Today, integrations such as `icapsuricata` synthesize packets to access Suricata's application-layer parsing and detection.

The use case is already noted in #2693: Philippe Antoine's 2022-11-11 comment lists "Have some already reassembled stream (SSL proxy)". The [icapsuricata discussion](https://forum.suricata.io/t/6357/3) provides a concrete request for stream-oriented ingestion.