Project

General

Profile

Actions

Bug #1999

closed

doc: nocase keyword mistake

Added by James Kovalev about 8 years ago. Updated over 7 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:

Description

[[http://suricata.readthedocs.io/en/latest/rules/payload-keywords.html]]
4.5.4. Nocase chapter, i beleive it should say "place after", instead of "place behind":
You have to place it behind the content you want to modify, like:

Actions

Also available in: Atom PDF