Throw new event for heartbeat messages.

Not tested.
add is_orig to heartbeat event
default to TLS when not being able to determine version
detect and alert on simple case of heartbleed
polish script and probably detect encrypted attacks too.
fix tabs.
make tls heartbeat messages a bit better.
add to local.bro, add disclaimer
also extract payload data in ssl_heartbeat
enable detection of encrypted heartbleeds.
Merge branch 'fastpath' into topic/bernhard/heartbeat
rip out state handline from ssl analyzer.

still seems to work, but basically untested.
Add Intel::ADDR lookup to host field

IP addresses are often seen in the HTTP host field; this change checks if the value in the host field is a valid IP address and processes the Intel::seen event to check for an Intel::ADDR indicator.
Update http-headers.bro
Update http-headers.bro
Update http-headers.bro
Nicer notices for heartbleed.

Duplicates are now excluded and the notice texts contain a bit more useful information.
Merge remote-tracking branch 'origin/master' into topic/bernhard/heartbeat
Refactor file analysis file ID lookup.

Now using a dictionary instead of std::map as order doesn't matter and
lookup time shouldn't increase as more files are in process of being
analyzed.
Merge remote-tracking branch 'origin/master' into topic/bernhard/ssl-analyzer