fix bug on double "Activate"

Clicking on "Suricata->Activate" twice was resulting in wireshark to
leave because the protocol dissector was redefined. Moving code
relative to dissector out af the activate function is fixing the
issue.