doc: add reference to ipaddr in IP matching

pull/8097/head
Eric Leblond 3 years ago committed by Victor Julien
parent 94664ef565
commit 9fb0137d9d

@ -1,3 +1,5 @@
.. _datasets:
Datasets Datasets
======== ========

@ -166,6 +166,11 @@ $HOME_NET Your setting of HOME_NET in yaml
You cannot write a signature using ``$EXTERNAL_NET`` because it evaluates to You cannot write a signature using ``$EXTERNAL_NET`` because it evaluates to
'not any', which is an invalid value. 'not any', which is an invalid value.
.. note::
Please note that the source and destination address can also be matched via the ``ip.src`` and ``ip.dst`` keywords (See :ref:`ipaddr`). These
keywords are mostly used in conjuction with the dataset feature (:ref:`datasets`).
Ports (source and destination) Ports (source and destination)
------------------------------ ------------------------------
.. container:: example-rule .. container:: example-rule

@ -1,3 +1,5 @@
.. _ipaddr:
IP Addresses Match IP Addresses Match
================== ==================

Loading…
Cancel
Save