From: Giuseppe Longo <giuseppe@glongo.it>
Date: Tue, 23 Apr 2019 14:27:41 +0000 (+0200)
Subject: doc: update http.protocol description
X-Git-Tag: suricata-5.0.0-beta1~20
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=76357350fdad26dc2832fd12d2173057b1d77cf9;p=thirdparty%2Fsuricata.git

doc: update http.protocol description
---

diff --git a/doc/userguide/rules/http-keywords.rst b/doc/userguide/rules/http-keywords.rst
index 2f8c041e34..1f97954f45 100644
--- a/doc/userguide/rules/http-keywords.rst
+++ b/doc/userguide/rules/http-keywords.rst
@@ -244,6 +244,15 @@ Example::
 
     alert http any any -> any any (flow:to_server; http_protocol; content:"HTTP/1.0"; sid:1;)
 
+``http.protocol`` replaces the previous keyword name: ```http_protocol``. You may continue
++to use the previous name, but it's recommended that rules be converted to use
++the new name.
+
+Example::
+
+    alert http any any -> any any (flow:to_server; http.protocol; content:"HTTP/1.0"; sid:1;)
+
+
 http_request_line
 -----------------