tests/tcp-hdr: actually test tcp-hdr keyword

Noticed that the tcp-hdr keyword test rule was actually using tcp.mss.
Adjusted it to use tcp.hdr instead.

diff --git a/tests/tcp-hdr-keyword/test.rules b/tests/tcp-hdr-keyword/test.rules
index a1aa40a1938a36ead21b698d9c5c6a7d259d61ce..8204ac8cb68ef09733d2e99337bf3f29c6eee3d3 100644 (file)
--- a/tests/tcp-hdr-keyword/test.rules
+++ b/tests/tcp-hdr-keyword/test.rules
@@ -1 +1 @@
-alert tcp any any -> any any (tcp.mss:<536; sid:1234; rev:5;)
+alert tcp any any -> any any (tcp.hdr; content:"|02 04|"; offset:20; byte_test:2,<,536,0,big,relative; sid:1234; rev:5;)