mark the unknown traffic

[oguzy]

[15:14:09 EEST] nicolas.collery: what is important though is classify as unknown, what you detect and cannot parse
[15:14:41 EEST] nicolas.collery: and since you mentioned last time about colors, i think unknown should stand clearly.

[15:15:09 EEST] nicolas.collery: so we can also internally later log all the unknown and try to create parsers