added a normalizer for dionaea connections