From 162ea8f759bc20c0e1d96e0430f0ae87688e8e3d Mon Sep 17 00:00:00 2001
From: Victor Julien <vjulien@oisf.net>
Date: Fri, 27 Feb 2026 09:46:28 +0100
Subject: [PATCH] doc: fix dcerpc.opnum documentation

Docs were claiming greater than, less than, etc. support even though this was never supported.

Fixes: 51be8f0238d3 ("doc/dcerpc: add proto keywords")

Ticket: #8330.
(cherry picked from commit 2480f8c038647bde1138cf2d88bb38115d80a624)
---
 doc/userguide/rules/dcerpc-keywords.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/doc/userguide/rules/dcerpc-keywords.rst b/doc/userguide/rules/dcerpc-keywords.rst
index 2065f66ef2..32296ccef4 100644
--- a/doc/userguide/rules/dcerpc-keywords.rst
+++ b/doc/userguide/rules/dcerpc-keywords.rst
@@ -41,18 +41,18 @@ interface in a DCERPC header.
 The format of the keyword::
 
   dcerpc.opnum:<u16>;
-  dcerpc.opnum:[>,<,!,=]<u16>;
   dcerpc.opnum:<u16>,<u16>,<u16>....;
   dcerpc.opnum:<u16>-<u16>;
 
 Examples::
 
   dcerpc.opnum:15;
-  dcerpc.opnum:>10;
   dcerpc.opnum:12,24,62,61;
   dcerpc.opnum:12,18-24,5;
   dcerpc.opnum:12-14,12,121,62-78;
 
+.. note:: earlier versions of the documentation incorrectly stated that greater than, less than, etc. notation was supported. This may be added later, see ticket `#8179 <https://redmine.openinfosecfoundation.org/issues/8179>`_).
+
 dcerpc.stub_data
 -----------------