Missing keywords for ET OPEN

[duanehoward]

After processing ET OPEN with trojan.rules web_specific_apps.rules and current _events.rules I've identified support gaps for the following missing keywords:

68 stream_size
10 itype
10 icode
3 flags
2 ssl_version
1 rawbytes
1 icmp_id

So, we're pretty close to complete support for ET OPEN. A few gaps to fille.

[duanehoward]

After trying to parse the entire ET OPEN set we still miss the following key words. Many of them can probably just be handled as tags.

19 ip_proto
17 window
17 fragbits
14 ack
10 asn1
8 id
4 detection_filter
3 ttl
3 ipopts
2 ssh.softwareversion
2 seq
1 sameip
1 ftpbounce
1 fragoffset
1 dce_iface
1 app-layer-protocol