From 10fcc8d2ca5ff341ca9762d51617fa0a7cba45a4 Mon Sep 17 00:00:00 2001 From: Mats Klepsland Date: Mon, 27 Aug 2018 12:43:06 +0200 Subject: [PATCH] doc: update tls.version documentation --- doc/userguide/rules/tls-keywords.rst | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/doc/userguide/rules/tls-keywords.rst b/doc/userguide/rules/tls-keywords.rst index 69ea8ad2b3..01517e5025 100644 --- a/doc/userguide/rules/tls-keywords.rst +++ b/doc/userguide/rules/tls-keywords.rst @@ -121,7 +121,17 @@ tls.version Match on negotiated TLS/SSL version. -Example values: "1.0", "1.1", "1.2" +Supported values: "1.0", "1.1", "1.2", "1.3" + +It is also possible to match versions using a hex string. + +Examples:: + + tls.version:1.2; + tls.version:0x7f12; + +The first example matches TLSv1.2, whilst the last example matches TLSv1.3 +draft 16. tls.subject -----------