From: Jose Cano -X (jcanogom - SOFTSERVE INC at Cisco) Date: Mon, 22 Jul 2024 18:35:41 +0000 (+0000) Subject: Pull request #4386: doc: builtin rule documentation updates X-Git-Tag: 3.3.2.0~6 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=db8df0dfef067166040f82487b736d239e9e77a4;p=thirdparty%2Fsnort3.git Pull request #4386: doc: builtin rule documentation updates Merge in SNORT/snort3 from ~JCANOGOM/snort3:doc_builtin_updates to master Squashed commit of the following: commit ce3cd8566952053e75d6a4b3481e8e43d72f5545 Author: Jose Cano Date: Mon Jul 15 17:14:16 2024 -0400 doc: builtin rule documentation updates --- diff --git a/doc/reference/builtin_stubs.txt b/doc/reference/builtin_stubs.txt index 71d11f4ff..c6de43164 100644 --- a/doc/reference/builtin_stubs.txt +++ b/doc/reference/builtin_stubs.txt @@ -286,15 +286,15 @@ The options length field extends past the end of the GENEVE header. 116:250 -The ICMP error message's original IP header is truncated. +The ICMP or IP in ICMP error message's original IP header is truncated. 116:251 -The ICMP error message's original IP packet's version and original IP header versions differ. +The ICMP or IP in ICMP error message's original IP packet's version and original IP header versions differ. 116:252 -The ICMP error message's original datagram's length is less than the original IP's header length. +The ICMP or IP in ICMP error message's original datagram's length is less than the original IP's header length. 116:253 @@ -670,7 +670,7 @@ An IPv6 packet was received with a routing type 0 extension header. 116:462 -The ERSpan2 version is not equal to 1 (the value of 1 signals that it's ERSpan2). +Incorrect ERSpan version. ERSpan2 should have version 1, ERSpan3 should have version 2. 116:463