doc: document valid nbytes ranges for byte_math

Suricata enforces 1-10 bytes when the string option is used and 1-4 bytes otherwise (DetectByteMathValidateNbytesOnly). Ticket: https://redmine.openinfosecfoundation.org/issues/8236
4 weeks ago · a006b37105
parent acd9d3a09e
commit a006b37105
1 changed files with 3 additions and 2 deletions
--- a/doc/userguide/rules/payload-keywords.rst
+++ b/doc/userguide/rules/payload-keywords.rst
@ -590,8 +590,9 @@ Format::


 +-----------------------+-----------------------------------------------------------------------+
-| <num of bytes>        | The number of bytes selected from the packet                          |
-|                       | or the name of a byte_extract variable.                               |
+| <num of bytes>        | The number of bytes selected from the packet or the name of a         |
+|                       | byte_extract variable.                                                |
+|                       | Valid values: 1-10 when the ``string`` option is used, 1-4 otherwise. |
 +-----------------------+-----------------------------------------------------------------------+
 | <offset>              | Number of bytes into the payload                                      |
 +-----------------------+-----------------------------------------------------------------------+