From: Mats Klepsland <mats.klepsland@gmail.com>
Date: Mon, 27 Aug 2018 10:43:06 +0000 (+0200)
Subject: doc: update tls.version documentation
X-Git-Tag: suricata-4.1.0-rc2~87
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=10fcc8d2ca5ff341ca9762d51617fa0a7cba45a4;p=thirdparty%2Fsuricata.git

doc: update tls.version documentation
---

diff --git a/doc/userguide/rules/tls-keywords.rst b/doc/userguide/rules/tls-keywords.rst
index 69ea8ad2b3..01517e5025 100644
--- a/doc/userguide/rules/tls-keywords.rst
+++ b/doc/userguide/rules/tls-keywords.rst
@@ -121,7 +121,17 @@ tls.version
 
 Match on negotiated TLS/SSL version.
 
-Example values: "1.0", "1.1", "1.2"
+Supported values: "1.0", "1.1", "1.2", "1.3"
+
+It is also possible to match versions using a hex string.
+
+Examples::
+
+  tls.version:1.2;
+  tls.version:0x7f12;
+
+The first example matches TLSv1.2, whilst the last example matches TLSv1.3
+draft 16.
 
 tls.subject
 -----------