diff --git a/doc/userguide/rules/ssh-keywords.rst b/doc/userguide/rules/ssh-keywords.rst index 526aa06d7b..83d2f2fe8d 100644 --- a/doc/userguide/rules/ssh-keywords.rst +++ b/doc/userguide/rules/ssh-keywords.rst @@ -113,7 +113,7 @@ Example:: alert ssh any any -> any any (msg:"match hassh-string"; \ ssh.hassh.string; content:"none,zlib@openssh.com,zlib"; \ - sid:1000030; + sid:1000030;) ``ssh.hassh.string`` is a 'sticky buffer'.