syslog and raw codecs broken out

made maximum TCP frame decoder size configurable
added metrics back, in a more generic manner