Add support for suricata socket mode. Less mem usage + No rule loads start time == profit