snort rule parser bugfix