From: Shivani Bhardwaj <shivani@oisf.net>
Date: Wed, 3 Apr 2024 07:12:11 +0000 (+0530)
Subject: doc: add note about fast_pattern w base64_data
X-Git-Tag: suricata-7.0.5~30
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F10846%2Fhead;p=thirdparty%2Fsuricata.git

doc: add note about fast_pattern w base64_data

Bug 6859
---

diff --git a/doc/userguide/rules/base64-keywords.rst b/doc/userguide/rules/base64-keywords.rst
index 7daf0c2603..190fdb5bf1 100644
--- a/doc/userguide/rules/base64-keywords.rst
+++ b/doc/userguide/rules/base64-keywords.rst
@@ -62,3 +62,5 @@ Example::
     alert http any any -> any any (msg:"Example"; content:"somestring"; http_uri; \
          base64_decode:bytes 8, offset 1, relative; \
          base64_data; content:"test"; sid:10001; rev:1;)
+
+.. note:: ``fast_pattern`` is ineffective with ``base64_data``