Provide mechanism for filtering plaintext and encrypted protocol traffic

[alma-pixie]

We want to identify traffic that is plaintext that is ingressing from or egressing to the Internet. The conn_stats table is able to indicate if a given connection is encrypted or not, but we'd like to ability to tie this back to specific protocol traces.