From: jason taylor Date: Fri, 28 Oct 2022 19:48:18 +0000 (+0000) Subject: userguide: update fragbits information X-Git-Tag: suricata-7.0.0-rc1~383 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7c73144988f4c93f668619f4e519e0bed7a26e25;p=thirdparty%2Fsuricata.git userguide: update fragbits information Signed-off-by: jason taylor --- diff --git a/doc/userguide/rules/header-keywords.rst b/doc/userguide/rules/header-keywords.rst index 69f3967e9d..d0b6575b3b 100644 --- a/doc/userguide/rules/header-keywords.rst +++ b/doc/userguide/rules/header-keywords.rst @@ -228,7 +228,7 @@ Example of fragbits in a rule: .. container:: example-rule - alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:"ET EXPLOIT Invalid non-fragmented packet with fragment offset>0"; :example-rule-emphasis:`fragbits: M;` fragoffset: >0; reference:url,doc.emergingthreats.net/bin/view/Main/2001022; classtype:bad-unknown; sid:2001022; rev:5; metadata:created_at 2010_07_30, updated_at 2010_07_30;) + alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:"fragbits keyword example non-fragmented packet with fragment offset>0"; :example-rule-emphasis:`fragbits:M;` fragoffset:>0; classtype:bad-unknown; sid:123; rev:1;) fragoffset ^^^^^^^^^^