From: Jeff Lucovsky <jeff@lucovsky.org>
Date: Sun, 9 May 2021 13:21:31 +0000 (-0400)
Subject: doc: Protocol name/case change for upgrade doc
X-Git-Tag: suricata-7.0.0-beta1~1631
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fcd1ae3bf112a0040bda07d2a66b6dd1d8102110;p=thirdparty%2Fsuricata.git

doc: Protocol name/case change for upgrade doc

This commit adds a one-liner to the upgrade document for 7.0 stating
that protocol names/values are now builtin to Suricata and that names
and their casing may change.
---

diff --git a/doc/userguide/upgrade.rst b/doc/userguide/upgrade.rst
index fd05fdd52e..7301df18cb 100644
--- a/doc/userguide/upgrade.rst
+++ b/doc/userguide/upgrade.rst
@@ -30,6 +30,21 @@ by the ones Suricata supplies.
 Major updates include new features, new default settings and often also
 remove features.
 
+Upgrading 6.0 to 7.0
+--------------------
+
+Major changes
+~~~~~~~~~~~~~
+
+Removals
+~~~~~~~~
+
+Logging changes
+~~~~~~~~~~~~~~~
+- Protocol values and their names are built-in to Suricata instead of using the system's ``/etc/protocols`` file. Some names and casing may have changed
+  in the values ``proto`` in ``eve.json`` log entries and other logs containing protocol names and values.
+  See https://redmine.openinfosecfoundation.org/issues/4267 for more information.
+
 Upgrading 5.0 to 6.0
 --------------------
 - SIP now enabled by default