Set matching child decoder in lf->decoder_info, if a child decoder matches.

If a child decoder regex matches, set the decoder in lf->decoder_info that child decoder. As of now the decoder is remains set to parent decoder. 

This can potentially fix https://github.com/ossec/ossec-hids/issues/164