tracking established connections

[Atticuss]

right now, every established tcp connection is tracked. need to implement logic to remove tracking of conns assumed to not be db related and to known bad conn list. will improve parsing speed on more congested networks with many open connections.