doc: add overview of *TriggerRawStreamReassembly

[inashivb]

Link to ticket: https://redmine.openinfosecfoundation.org/issues/4351

Apart from the content, looking for feedback on:

• organization
• naming schemes of folders and files

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 82.56%. Comparing base (eeec609) to head (70cb1e3).

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #11446      +/-   ##
==========================================
+ Coverage   82.44%   82.56%   +0.12%     
==========================================
  Files         938      938              
  Lines      248068   248068              
==========================================
+ Hits       204513   204816     +303     
+ Misses      43555    43252     -303     

Flag	Coverage Δ
fuzzcorpus	60.61% <ø> (+0.51%)	⬆️
livemode	18.71% <ø> (ø)
pcap	43.76% <ø> (+0.04%)	⬆️
suricata-verify	61.47% <ø> (+0.05%)	⬆️
unittests	59.43% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

[jufajardini]

<3

Thanks for helping us all understand this better :)

As this is a draft, are you planning on adding an explanation on what does it mean to allow the detection engine to have access to a bigger portion of the raw stream?

[inashivb]

are you planning on adding an explanation on what does it mean to allow the detection engine to have access to a bigger portion of the raw stream?

I intended that to be shown with the diagram, could you please tell if something should be changed there or some text?

[jufajardini]

are you planning on adding an explanation on what does it mean to allow the detection engine to have access to a bigger portion of the raw stream?

I intended that to be shown with the diagram, could you please tell if something should be changed there or some text?

I think that it's usually good to have a textual explanation of what the diagram illustrates (it may feel redundant, but considering that these concepts are complex and new to many; and people's learning abilities differ; I consider this makes docs more accessible :) ).