save the full header in :content
add author to all modules, and add a dns_cache_snoop module based on DNSSnoopDogg by @felmoltor