feature: add source IP exclusion with CIDR support

Features:
- Add exclude_source_ips configuration option
- Support single IPs (192.168.1.1) and CIDR ranges (10.0.0.0/8)
- Filter packets in parser before TLS processing
- Log exclusion configuration at startup
- New ipfilter package with IP/CIDR matching
- Unit tests for ipfilter package

Configuration example:
  exclude_source_ips:
    - "10.0.0.0/8"       # Exclude private network
    - "192.168.1.1"      # Exclude specific IP
    - "172.16.0.0/12"    # Exclude another range
    - "2001:db8::/32"    # IPv6 support

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>

cmd/ja4sentinel/main.go

@@ -7,6 +7,7 @@ import (
 	"fmt"
 	"os"
 	"os/signal"
+	"strings"
 	"syscall"
 	"time"
 
@@ -113,8 +114,19 @@ func main() {
 
 	// Create pipeline components
 	captureEngine := capture.New()
-	parser := tlsparse.NewParserWithTimeout(time.Duration(appConfig.Core.FlowTimeoutSec) * time.Second)
+	parser := tlsparse.NewParserWithTimeoutAndFilter(
+		time.Duration(appConfig.Core.FlowTimeoutSec)*time.Second,
+		appConfig.Core.ExcludeSourceIPs,
+	)
 	fingerprintEngine := fingerprint.NewEngine()
+
+	// Log exclusion configuration
+	if len(appConfig.Core.ExcludeSourceIPs) > 0 {
+		appLogger.Info("main", "Source IP exclusion enabled", map[string]string{
+			"exclude_count": fmt.Sprintf("%d", len(appConfig.Core.ExcludeSourceIPs)),
+			"exclude_ips":   strings.Join(appConfig.Core.ExcludeSourceIPs, ", "),
+		})
+	}
 	
 	// Create output builder with error callback for socket connection errors
 	outputBuilder := output.NewBuilder().WithErrorCallback(func(socketPath string, err error, attempt int) {