# Offline replay of the reproducer on Suricata 8.0.7 (jasonish/suricata:8.0.7)
# 2026-09-24T15:26:58Z

$ docker run --rm --entrypoint /usr/bin/suricata -v $PWD:/d jasonish/suricata:8.0.7 \
    -r /d/input.pcap -S /d/test.rules -l /d/out -k none

i: suricata: This is Suricata version 8.0.7 RELEASE running in USER mode
i: threads: Threads created -> RX: 1 W: 6 FM: 1 FR: 1   Engine started.
i: suricata: Signal Received.  Stopping engine.
i: pcap: read 1 file, 102 packets, 98281 bytes

# fast.log
09/24/2025-14:00:00.038395  [**] [1:1000001:1] HTTP multi-value Content-Encoding: plaintext body must reach inspection hooks [**] [Classification: Potential Corporate Privacy Violation] [Priority: 1] {TCP} 172.20.145.41:80 -> 115.200.248.4:40000
09/24/2025-14:00:03.009599  [**] [1:1000001:1] HTTP multi-value Content-Encoding: plaintext body must reach inspection hooks [**] [Classification: Potential Corporate Privacy Violation] [Priority: 1] {TCP} 172.20.145.41:80 -> 115.200.248.4:40002
09/24/2025-14:00:01.510399  [**] [1:1000001:1] HTTP multi-value Content-Encoding: plaintext body must reach inspection hooks [**] [Classification: Potential Corporate Privacy Violation] [Priority: 1] {TCP} 172.20.145.41:80 -> 115.200.248.4:40001
