doc: fix byte_test examples

As this keyword has 4 mandatory arguments, and some examples
had only three...

Ticket: 6629
pull/10134/head
Philippe Antoine 3 years ago committed by Victor Julien
parent a37fa62710
commit 4933b817aa

@ -412,23 +412,23 @@ Example::
alert tcp any any -> any any \ alert tcp any any -> any any \
(msg:"Byte_Test Example - Num = Value"; \ (msg:"Byte_Test Example - Num = Value"; \
content:"|00 01 00 02|"; byte_test:2,=,0x01;) content:"|00 01 00 02|"; byte_test:2,=,0x01,0;)
alert tcp any any -> any any \ alert tcp any any -> any any \
(msg:"Byte_Test Example - Num = Value relative to content"; \ (msg:"Byte_Test Example - Num = Value relative to content"; \
content:"|00 01 00 02|"; byte_test:2,=,0x03,relative;) content:"|00 01 00 02|"; byte_test:2,=,0x03,2,relative;)
alert tcp any any -> any any \ alert tcp any any -> any any \
(msg:"Byte_Test Example - Num != Value"; content:"|00 01 00 02|"; \ (msg:"Byte_Test Example - Num != Value"; content:"|00 01 00 02|"; \
byte_test:2,!=,0x06;) byte_test:2,!=,0x06,0;)
alert tcp any any -> any any \ alert tcp any any -> any any \
(msg:"Byte_Test Example - Detect Large Values"; content:"|00 01 00 02|"; \ (msg:"Byte_Test Example - Detect Large Values"; content:"|00 01 00 02|"; \
byte_test:2,>,1000,relative;) byte_test:2,>,1000,1,relative;)
alert tcp any any -> any any \ alert tcp any any -> any any \
(msg:"Byte_Test Example - Lowest bit is set"; \ (msg:"Byte_Test Example - Lowest bit is set"; \
content:"|00 01 00 02|"; byte_test:2,&,0x01,relative;) content:"|00 01 00 02|"; byte_test:2,&,0x01,12,relative;)
alert tcp any any -> any any (msg:"Byte_Test Example - Compare to String"; \ alert tcp any any -> any any (msg:"Byte_Test Example - Compare to String"; \
content:"foobar"; byte_test:4,=,1337,1,relative,string,dec;) content:"foobar"; byte_test:4,=,1337,1,relative,string,dec;)

Loading…
Cancel
Save