From 7c73144988f4c93f668619f4e519e0bed7a26e25 Mon Sep 17 00:00:00 2001 From: jason taylor Date: Fri, 28 Oct 2022 19:48:18 +0000 Subject: [PATCH] userguide: update fragbits information Signed-off-by: jason taylor --- doc/userguide/rules/header-keywords.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/userguide/rules/header-keywords.rst b/doc/userguide/rules/header-keywords.rst index 69f3967e9d..d0b6575b3b 100644 --- a/doc/userguide/rules/header-keywords.rst +++ b/doc/userguide/rules/header-keywords.rst @@ -228,7 +228,7 @@ Example of fragbits in a rule: .. container:: example-rule - alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:"ET EXPLOIT Invalid non-fragmented packet with fragment offset>0"; :example-rule-emphasis:`fragbits: M;` fragoffset: >0; reference:url,doc.emergingthreats.net/bin/view/Main/2001022; classtype:bad-unknown; sid:2001022; rev:5; metadata:created_at 2010_07_30, updated_at 2010_07_30;) + alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:"fragbits keyword example non-fragmented packet with fragment offset>0"; :example-rule-emphasis:`fragbits:M;` fragoffset:>0; classtype:bad-unknown; sid:123; rev:1;) fragoffset ^^^^^^^^^^