suricata: optional geoip support