Add support for content_len keyword in suricata - feature 735