[Reviewer: Mike] Http flows in sas

Mike, please could you review this PR as part of adding logging of full HTTP messages to SAS, along with local and remote IP addresses and ports.
Yes that is standard (see for example event 0x000001 and 0x000002 for SIP messages).