Todo:

	o add non-ip protocols (IPX and Appletalk are up next, maybe NetBeui?)

	o Add -l.  "Line" (stream) buffer.  Instead of processing as packets, 
	  process as accumulated data streams.  Still not sure what the exact 
	  semantics should be; should we match streams of data until a
	  delimiter (default "\n") is seen?  Using libnids accumulating 
	  streams is a no brainer, but do folks think this would be useful?

	o Previous feature request to match entire streams (tcp only) is 
	  being ommitted in favour of apt (apt packet tracker, beta coming 
	  out soon).