see https://github.com/inliniac/suricata/pull/396#discussion_r4934438