From: jason taylor Date: Wed, 28 Sep 2022 23:58:03 +0000 (+0000) Subject: userguide: update sameip keyword information X-Git-Tag: suricata-7.0.0-rc1~389 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=6226492976a2c6fb96bde9a64882ad2520d1d26a;p=thirdparty%2Fsuricata.git userguide: update sameip keyword information Signed-off-by: jason taylor --- diff --git a/doc/userguide/rules/header-keywords.rst b/doc/userguide/rules/header-keywords.rst index 8a6318b9a1..efb411b338 100644 --- a/doc/userguide/rules/header-keywords.rst +++ b/doc/userguide/rules/header-keywords.rst @@ -82,7 +82,7 @@ Example of sameip in a rule: .. container:: example-rule - alert ip any any -> any any (msg:"GPL SCAN same SRC/DST"; :example-rule-emphasis:`sameip;` reference:bugtraq,2666; reference:cve,1999-0016; reference:url,www.cert.org/advisories/CA-1997-28.html; classtype:bad-unknown; sid:2100527; rev:9;) + alert ip any any -> any any (msg:"IP Packet with the same source and destination IP"; :example-rule-emphasis:`sameip;` classtype:bad-unknown; sid:3; rev:1;) ip_proto ^^^^^^^^