Support Bro conn.log processing

[chrisforce1]

To send IP events to the API for scoring, we need to pick up the following from conn.log (full schema here): ts, id.orig_h, id.orig_p, id.resp_h, id.resp_p, proto, orig_bytes, and resp_bytes. NFR should only send IP data for Internet-bound destinations to the API for processing, so RFC 3330 IPv4 and RFC 5156 IPv6 destinations should be ignored.