Immediate block more nmap scans

[btaub]

nmap-PN.cap.gz
nmap-sV.cap.gz

Certain scan types aren't blocked immediately and are only caught by the analysis process. See attached pcaps for a couple examples. Perhaps make it user configurable (after X ports scanned by the same host, block immediately).