If an IP-only pass rule matches, set the no inspect flag for that flow. Bug #718.
fix for #771.

Fix /etc/protocols parsing.  Remove trailing newspace stored under some cases.
fix for #770.

Invalidate sigs with negative depth.
Coverity 989710 and 989711: small recourse leaks in filemd5 parsing code.