[PATCH 3/9] suricata: Define bypass mark