doc: fix http_header_names example

diff --git a/doc/userguide/rules/http-keywords.rst b/doc/userguide/rules/http-keywords.rst
index 6d38460b97a5b010c35cfd6b6bdf7ba99a62225f..613496a5f64f0edc97262354ced78fba46bad179 100644 (file)
--- a/doc/userguide/rules/http-keywords.rst
+++ b/doc/userguide/rules/http-keywords.rst
@@ -485,7 +485,7 @@ Example rule::
 Example to make sure *only* Host is present::
 
     alert http any any -> any any (http_header_names; \
-            content:"|0d 0a 0d 0a|Host|0d 0a 0d 0a|"; sid:1;)
+            content:"|0d 0a|Host|0d 0a 0d 0a|"; sid:1;)
 
 Example to make sure *User-Agent* is directly after *Host*::