One important demand for detection need help

In same stream,Multiple post requests use same URL and the response responds to 200 OK ; The first 10 bytes of two consecutive post request_bodies are the same;

if suricata rule or rule script can deel with the problem ?

Or zeek engine ?

How would you like to deal with the problem overall? It’s not quite clear what you want to achieve in detail.