Suricata prefers CIDR masks on HOME_NET and EXTERNAL_NET addresses.