snort plugin: Replace the mmap() code with the tail-code from collectd.