Skip to content

Commit

Permalink
doc/transform: Correct typo
Browse files Browse the repository at this point in the history
  • Loading branch information
jlucovsky authored and victorjulien committed Jun 22, 2024
1 parent d205ff8 commit 01e20c9
Showing 1 changed file with 5 additions and 3 deletions.
8 changes: 5 additions & 3 deletions doc/userguide/rules/transforms.rst
Original file line number Diff line number Diff line change
Expand Up @@ -96,7 +96,7 @@ to_uppercase

Converts the buffer to uppercase and passes the value on.

This example alerts if ``http.uri`` contains ``THIS TEXT HAS BEEN CONVERTED TO LOWERCASE``
This example alerts if ``http.uri`` contains ``THIS TEXT HAS BEEN CONVERTED TO UPPERCASE``

Example::

Expand Down Expand Up @@ -216,12 +216,14 @@ There are defaults for each of the options:
- ``offset`` defaults to ``0`` and must be less than ``65536``
- ``mode`` defaults to ``rfc4648``

Note that both ``bytes`` and ``offset`` may be variables from `byte_extract` and/or `byte_math`.
Note that both ``bytes`` and ``offset`` may be variables from `byte_extract` and/or `byte_math` in
later versions of Suricata. They are not supported yet.

Mode ``rfc4648`` applies RFC 4648 decoding logic which is suitable for encoding binary
data that can be safely sent by email, used in a URL, or included with HTTP POST requests.

Mode ``rfc2045`` applies RFC 2045 decoding logic which supports strings, including those with embedded spaces.
Mode ``rfc2045`` applies RFC 2045 decoding logic which supports strings, including those with embedded spaces,
line breaks, and any non base64 alphabet.

Mode ``strict`` will fail if an invalid character is found in the encoded bytes.

Expand Down

0 comments on commit 01e20c9

Please sign in to comment.