diff --git a/doc/userguide/rules/xbits.rst b/doc/userguide/rules/xbits.rst index 120d9dd1d2..ebce973468 100644 --- a/doc/userguide/rules/xbits.rst +++ b/doc/userguide/rules/xbits.rst @@ -1,7 +1,7 @@ Xbits Keyword ============= -Set, unset, toggle and check for bits stored per host or ip_pair. +Set, unset, toggle and check for bits stored per host, ip_pair or tx. Syntax:: @@ -10,6 +10,15 @@ Syntax:: [,expire ]; xbits:,,track \ [,expire ]; + xbits:,,track tx; + +Transaction support (`tx`) +~~~~~~~~~~~~~~~~~~~~~~~~~~ + +Bits stored per app-layer transaction. What counts as a transaction protocol +is implementation dependent. + +See :ref:`Protocols` for a per protocol explanation. Notes ~~~~~