]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
doc: add note about file.data and file_data
authorjason taylor <jtfas90@gmail.com>
Mon, 2 May 2022 12:06:56 +0000 (12:06 +0000)
committerVictor Julien <vjulien@oisf.net>
Tue, 3 May 2022 09:15:26 +0000 (11:15 +0200)
Signed-off-by: jason taylor <jtfas90@gmail.com>
doc/userguide/rules/http-keywords.rst

index 8436a41a76c386b20de74efb8ca659b5ce50d29b..69db08c8f17ad3a14aa002286f860fa995c48ab2 100644 (file)
@@ -772,6 +772,9 @@ Flash decompression must be enabled under ``libhtp`` configuration:
 Notes
 ~~~~~
 
+-  file.data is the preferred notation, however, file_data is still
+   recognized by the engine and works as well.
+
 -  If a HTTP body is using gzip or deflate, ``file.data`` will match
    on the decompressed data.