suricata: Configure the Intrusion Detection System

This configures suricata and pulls down the latest GPL'd ETOpen Ruleset.

It also performs some network optimizations, and I was finally able to get suricata to run without any warnings for the first time. It also has the ability to disable certain rule goups.
And, can we ``/var/tmp`` instead of ``/tmp``?