Suricata

Hi,

I know this is related to an old suricata version, but here it is anyway.

A Debian user reports that when migrating a custom rule from suricata 1.x to 2.x the rule stoped working.
See details in the debian bug report https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783660

The rule seems to be:

alert http any any -> any any (msg:"User-Agent Gecko http_user_agent"; content:"Gecko"; http_user_agent; sid:2; rev:1;)

I asked for more info back in Aug 2016, but no reply so far.

Would you recommend just closing this bug?

regards.