detect/analyzer: suggest modern keywords

(cherry picked from commit b55b327db1590ae7e8ccb1a9ada9ddaa29a900bb)

diff --git a/src/detect-engine-analyzer.c b/src/detect-engine-analyzer.c
index 090f5a6f1aa962e5b848951af06d598fa5e9857b..4a03651497b63c320ae8dc7226998666021d421a 100644 (file)
--- a/src/detect-engine-analyzer.c
+++ b/src/detect-engine-analyzer.c
@@ -649,13 +649,13 @@ static void DumpMatches(RuleAnalyzer *ctx, JsonBuilder *js, const SigMatchData *
                 }
                 if (LooksLikeHTTPMethod(cd->content, cd->content_len)) {
                     AnalyzerWarning(ctx,
-                            (char *)"pattern looks like it inspects HTTP, use http_request_line or "
-                                    "http_method and http_uri instead for improved performance");
+                            (char *)"pattern looks like it inspects HTTP, use http.request_line or "
+                                    "http.method and http.uri instead for improved performance");
                 }
                 if (LooksLikeHTTPUA(cd->content, cd->content_len)) {
                     AnalyzerWarning(ctx,
-                            (char *)"pattern looks like it inspects HTTP, use http_user_agent "
-                                    "or http_header for improved performance");
+                            (char *)"pattern looks like it inspects HTTP, use http.user_agent "
+                                    "or http.header for improved performance");
                 }
                 jb_close(js);
                 break;