Fix a couple off-by-one errors in parsing multiple TLS records

Reported by Kent Fritz: http://seclists.org/nmap-dev/2014/q4/104
Fix file permissions and missing require in http-avaya-ipoffice-users
Note a done task
Fix a typo (minimum vs maximum)
Do optimization of pcap filters via set_pcap_filter

Optimizing reduces BPF instructions from 45 to 10 for large-scan case.

Also use PCAP_NETMASK_UNKNOWN instead of 0 since we don't provide a
netmask.
Update some xml.cc comments and add encoding and standalone declarations

Explanatory comments within, but this came from reading the XML 1.0
spec. See some history:

http://seclists.org/nmap-dev/2013/q4/48 - Added DOCTYPE
http://seclists.org/nmap-dev/2014/q2/82 - broke Zenmap
http://seclists.org/nmap-dev/2014/q3/331 - reduced DOCTYPE
Remove standalone="yes" from xml output

This is complicated: a validating parser needs to know how to handle
whitespace (as ignorable markup or as a whitespace node). The default is
to treat it as a whitespace node, and the standalone="yes" tells it that
the document can be handled as such, since there is no internal doctype
definition that says otherwise. But then, when we try to validate
against our DTD, the parser sees that some elements are defined with
element-only content, which conflicts with the standalone default.

References:
http://www.w3.org/TR/REC-xml/#sec-rmd
http://bytes.com/topic/net/answers/553902-standalone-yes
Fix detection of CVE-2011-2523

http://seclists.org/nmap-dev/2014/q4/130
Add configure test for PCAP_NETMASK_UNKNOWN
Correct script-args docs for http-virustotal
[NSE] Added sanity check in data/http-devframework-fingerprints.lua
Integrate more service fingerprints
Add config.h entries for PCAP_NETMASK_UNKNOWN
tls.lua: get info about a cipher suite by parsing its name
Clean up line endings (stray \r)
New function, sslcert.parse_ssl_certificate

For reasons, the function is exported from nse_ssl_cert.cc into
nmap.socket, then included and documented in sslcert.lua because it fits
better there.
Add server certificate message parsing to tls.lua
Restructure try_params to return all recieved records

No functional change to the script, but this allows callers to check for
various alerts or other handshake messages (certificate,
server_key_params, client_certificate_request, etc).
Modify some offensive terminology in comments.
Remove unnecessary vars and redistribute declarations