Merge branch 'master' of https://github.com/rdenniston/zeek

* 'master' of https://github.com/rdenniston/zeek:
  Add linux netfilter NFLOG capture functionality initial commit

I made modifications:

  - Formatting / code style

  - More error handling and validity checks

  - The Type and Length value of TLVs is technically host order

  - Changed / fixed the Length value padding check: it's generally
    32-bit alignment, not just aligning any TLV less than 8 bytes.

testing/btest/Baseline/core.nflog/http.log

@@ -0,0 +1,10 @@
+#separator \x09
+#set_separator	,
+#empty_field	(empty)
+#unset_field	-
+#path	http
+#open	2019-03-20-02-08-50
+#fields	ts	uid	id.orig_h	id.orig_p	id.resp_h	id.resp_p	trans_depth	method	host	uri	referrer	version	user_agent	origin	request_body_len	response_body_len	status_code	status_msg	info_code	info_msg	tags	username	password	proxied	orig_fuids	orig_filenames	orig_mime_types	resp_fuids	resp_filenames	resp_mime_types
+#types	time	string	addr	port	addr	port	count	string	string	string	string	string	string	string	count	count	count	string	count	string	set[enum]	string	string	set[string]	vector[string]	vector[string]	vector[string]	vector[string]	vector[string]	vector[string]
+1470574779.148133	CHhAvVGS1DHFjwGM9	10.0.2.15	49762	93.184.216.34	80	1	GET	www.example.net	/	-	1.1	curl/7.50.1	-	0	1270	200	OK	-	-	(empty)	-	-	-	-	-	-	F57zxQB092IOFcB15	-	text/html
+#close	2019-03-20-02-08-50

testing/btest/core/nflog.bro

@@ -0,0 +1,4 @@
+# @TEST-EXEC: bro -C -r $TRACES/nflog-http.pcap %INPUT
+# @TEST-EXEC: btest-diff http.log
+
+@load base/protocols/http