Another tunneling checkpoint.

- AYIYA works.
  - AYIYA analyzed connections are still labelled wrong in conn.log (logged as syslog)
- Some clean up for left over code.
- Small refactoring to pass packets back from analyzers to core.
- $uid is now optional in conn logs since ip-in-ip tunnel parent's
  won't have an actual connection.

src/types.bif

@@ -178,8 +178,7 @@ enum Type %{
 	IP4_IN_IP6,
 	IP6_IN_UDP,
 	IP4_IN_UDP,
-	IP6_IN_AYIAY,
-	IP4_IN_AYIAY,
+	AYIYA,
 %}
 
 type EncapsulatingConn: record;