doc: add note about fast_pattern w base64_data

Bug 5220

diff --git a/doc/userguide/rules/base64-keywords.rst b/doc/userguide/rules/base64-keywords.rst
index 7daf0c2603a987e2161466d30b6aeb499c199dec..81db203448a28e9e7c8f9a64b8aa96a1aeb951fc 100644 (file)
--- a/doc/userguide/rules/base64-keywords.rst
+++ b/doc/userguide/rules/base64-keywords.rst
@@ -62,3 +62,5 @@ Example::
     alert http any any -> any any (msg:"Example"; content:"somestring"; http_uri; \
          base64_decode:bytes 8, offset 1, relative; \
          base64_data; content:"test"; sid:10001; rev:1;)
+
+.. note:: ``base64_data`` cannot be used with ``fast_pattern`` and will result in a rule load error.