Bug: MISP rules generating warning in suricata

[gordnhoo]

Actual behavior

http.header; content: "Host|3a|"; nocase; http.header; content:"bordersoarmanusjuw.shop"; fast_pattern; nocase; pcre: "/(^|[^A-Za-z0-9-])bordersoarmanusjuw.shop[^A-Za-z0-9-\.]/Hi";

Expected behavior

http.header; content: "Host|3a|"; nocase; content:"bordersoarmanusjuw.shop"; fast_pattern; nocase; pcre: "/(^|[^A-Za-z0-9-])bordersoarmanusjuw.shop[^A-Za-z0-9-\.]/i";

This is giving unnecessary warnings in suricata thus making it take longer to actually update the rules

Steps to reproduce

I'm running suricata on the most recent version 7.0.4
sudo suricata-update add-source --http-header "Authorization: " MISP https://misp/attributes/restSearch/returnFormat:suricata/threat_level_id:1/publish_timestamp:168h
sudo sruicata-update

Code of Conduct

• I agree to follow this project's Code of Conduct