doc: fix http_header_names example

diff --git a/doc/userguide/rules/http-keywords.rst b/doc/userguide/rules/http-keywords.rst
index e7fdae68a86ada5206bdc851fe0ca255b339ef26..1e43fd1a4197ede79df0410366fbb38f2ba14734 100644 (file)
--- a/doc/userguide/rules/http-keywords.rst
+++ b/doc/userguide/rules/http-keywords.rst
@@ -482,7 +482,7 @@ Example rule::
 Example to make sure *only* Host is present::
 
     alert http any any -> any any (http_header_names; \
-            content:"|0d 0a 0d 0a|Host|0d 0a 0d 0a|"; sid:1;)
+            content:"|0d 0a|Host|0d 0a 0d 0a|"; sid:1;)
 
 Example to make sure *User-Agent* is directly after *Host*::