Pull request #4386: doc: builtin rule documentation updates

Merge in SNORT/snort3 from ~JCANOGOM/snort3:doc_builtin_updates to master

Squashed commit of the following:

commit ce3cd8566952053e75d6a4b3481e8e43d72f5545
Author: Jose Cano <jcanogom@cisco.com>
Date:   Mon Jul 15 17:14:16 2024 -0400

    doc: builtin rule documentation updates

diff --git a/doc/reference/builtin_stubs.txt b/doc/reference/builtin_stubs.txt
index 71d11f4ff3274b1b4762b5369184a4fd02183d91..c6de43164ad469e56d84c0563366024f5060b18d 100644 (file)
--- a/doc/reference/builtin_stubs.txt
+++ b/doc/reference/builtin_stubs.txt
@@ -286,15 +286,15 @@ The options length field extends past the end of the GENEVE header.
 
 116:250
 
-The ICMP error message's original IP header is truncated.
+The ICMP or IP in ICMP error message's original IP header is truncated.
 
 116:251
 
-The ICMP error message's original IP packet's version and original IP header versions differ.
+The ICMP or IP in ICMP error message's original IP packet's version and original IP header versions differ.
 
 116:252
 
-The ICMP error message's original datagram's length is less than the original IP's header length.
+The ICMP or IP in ICMP error message's original datagram's length is less than the original IP's header length.
 
 116:253
 
@@ -670,7 +670,7 @@ An IPv6 packet was received with a routing type 0 extension header.
 
 116:462
 
-The ERSpan2 version is not equal to 1 (the value of 1 signals that it's ERSpan2).
+Incorrect ERSpan version. ERSpan2 should have version 1, ERSpan3 should have version 2.
 
 116:463