From 3019f10ac796954dcda7ebe53587f529800132c7 Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Thu, 17 Oct 2019 07:27:55 +0200 Subject: [PATCH] detect/tls: tls.cert_fingerprint is a sticky buffer Not a content modifier. --- src/detect-tls-cert-fingerprint.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/detect-tls-cert-fingerprint.c b/src/detect-tls-cert-fingerprint.c index e5e2a4d886..111a2cfe7b 100644 --- a/src/detect-tls-cert-fingerprint.c +++ b/src/detect-tls-cert-fingerprint.c @@ -75,7 +75,7 @@ void DetectTlsFingerprintRegister(void) { sigmatch_table[DETECT_AL_TLS_CERT_FINGERPRINT].name = "tls.cert_fingerprint"; sigmatch_table[DETECT_AL_TLS_CERT_FINGERPRINT].alias = "tls_cert_fingerprint"; - sigmatch_table[DETECT_AL_TLS_CERT_FINGERPRINT].desc = "content modifier to match the TLS cert fingerprint buffer"; + sigmatch_table[DETECT_AL_TLS_CERT_FINGERPRINT].desc = "match on the TLS cert fingerprint buffer"; sigmatch_table[DETECT_AL_TLS_CERT_FINGERPRINT].url = DOC_URL DOC_VERSION "/rules/tls-keywords.html#tls-cert-fingerprint"; sigmatch_table[DETECT_AL_TLS_CERT_FINGERPRINT].Setup = DetectTlsFingerprintSetup; #ifdef UNITTESTS