the snort codebase has some caching stuff in it. Im not sure if it's been abstracted out to a full library though.