From 7f5ffeebada67d09a1dfa8e4f002510593e0d83d Mon Sep 17 00:00:00 2001 From: Jason Ish Date: Tue, 20 Sep 2016 08:59:10 -0600 Subject: [PATCH] doc: dns: sync up with wiki --- doc/userguide/rules/dns-keywords.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/userguide/rules/dns-keywords.rst b/doc/userguide/rules/dns-keywords.rst index a437553c81..e7e4fc1d61 100644 --- a/doc/userguide/rules/dns-keywords.rst +++ b/doc/userguide/rules/dns-keywords.rst @@ -12,7 +12,7 @@ network-traffic. dns_query --------- -With **dns_query** the DNS response body is inspected. The dns_query +With **dns_query** the DNS request queries are inspected. The dns_query keyword works a bit different from the normal content modifiers. When used in a rule all contents following it are affected by it. Example: