From 6226492976a2c6fb96bde9a64882ad2520d1d26a Mon Sep 17 00:00:00 2001 From: jason taylor Date: Wed, 28 Sep 2022 23:58:03 +0000 Subject: [PATCH] userguide: update sameip keyword information Signed-off-by: jason taylor --- doc/userguide/rules/header-keywords.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/userguide/rules/header-keywords.rst b/doc/userguide/rules/header-keywords.rst index 8a6318b9a1..efb411b338 100644 --- a/doc/userguide/rules/header-keywords.rst +++ b/doc/userguide/rules/header-keywords.rst @@ -82,7 +82,7 @@ Example of sameip in a rule: .. container:: example-rule - alert ip any any -> any any (msg:"GPL SCAN same SRC/DST"; :example-rule-emphasis:`sameip;` reference:bugtraq,2666; reference:cve,1999-0016; reference:url,www.cert.org/advisories/CA-1997-28.html; classtype:bad-unknown; sid:2100527; rev:9;) + alert ip any any -> any any (msg:"IP Packet with the same source and destination IP"; :example-rule-emphasis:`sameip;` classtype:bad-unknown; sid:3; rev:1;) ip_proto ^^^^^^^^