I don’t think so. Suricata can carve files from protocols that have a notion of “files” and calculate hashes, store them on disk etc based on these files. It can also transparently decompress, say, HTTP traffic that is compressed via the protocol, to inspect the payload.
But I haven’t seen a feature such as the one you describe. I think your LLM answer is a hallucination.