From: Andreas Herz <andi@geekosphere.org>
Date: Thu, 22 Oct 2020 20:41:17 +0000 (+0200)
Subject: doc: add documentation for rawbytes keyword
X-Git-Tag: suricata-7.0.0-beta1~1666
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a5f36eccf1fcbcd08edec6576f5f6746cba95c7e;p=thirdparty%2Fsuricata.git

doc: add documentation for rawbytes keyword
---

diff --git a/doc/userguide/rules/payload-keywords.rst b/doc/userguide/rules/payload-keywords.rst
index 1a41ef9767..833c77c6d7 100644
--- a/doc/userguide/rules/payload-keywords.rst
+++ b/doc/userguide/rules/payload-keywords.rst
@@ -240,6 +240,12 @@ payload for a match, use within.
 
 .. image:: payload-keywords/within_distance2.png
 
+rawbytes
+--------
+
+The rawbytes keyword has no effect but is included to be comaptible with
+signatures that use it, for example signatures used with Snort.
+
 isdataat
 --------