From 6d925965480ccd0af52b45750745f37268e1e3fb Mon Sep 17 00:00:00 2001 From: Shivani Bhardwaj Date: Fri, 22 Mar 2024 11:37:39 +0530 Subject: [PATCH] doc: add note about fast_pattern w base64_data Bug 5220 --- doc/userguide/rules/base64-keywords.rst | 2 ++ 1 file changed, 2 insertions(+) diff --git a/doc/userguide/rules/base64-keywords.rst b/doc/userguide/rules/base64-keywords.rst index 7daf0c2603..81db203448 100644 --- a/doc/userguide/rules/base64-keywords.rst +++ b/doc/userguide/rules/base64-keywords.rst @@ -62,3 +62,5 @@ Example:: alert http any any -> any any (msg:"Example"; content:"somestring"; http_uri; \ base64_decode:bytes 8, offset 1, relative; \ base64_data; content:"test"; sid:10001; rev:1;) + +.. note:: ``base64_data`` cannot be used with ``fast_pattern`` and will result in a rule load error.