Notice this in the suricata.yaml:
request_body_limit
response-body-limit
Are the variables supposed to be seperated by dashes or underscores? The
wiki page
(https://redmine.openinfosecfoundation.org/projects/suricata/wiki/File_Extraction)
has everything documented as using dashes.
-- Eoin