Add samples to detect-tor.bro

Added samples to notice.log to reduce time to determine if activity truly is Tor.