diff --git a/doc/userguide/rules/dcerpc-keywords.rst b/doc/userguide/rules/dcerpc-keywords.rst index 2065f66ef2..32296ccef4 100644 --- a/doc/userguide/rules/dcerpc-keywords.rst +++ b/doc/userguide/rules/dcerpc-keywords.rst @@ -41,18 +41,18 @@ interface in a DCERPC header. The format of the keyword:: dcerpc.opnum:; - dcerpc.opnum:[>,<,!,=]; dcerpc.opnum:,,....; dcerpc.opnum:-; Examples:: dcerpc.opnum:15; - dcerpc.opnum:>10; dcerpc.opnum:12,24,62,61; dcerpc.opnum:12,18-24,5; dcerpc.opnum:12-14,12,121,62-78; +.. note:: earlier versions of the documentation incorrectly stated that greater than, less than, etc. notation was supported. This may be added later, see ticket `#8179 `_). + dcerpc.stub_data -----------------