Juliana Fajardini Reichow

> But this rule would not match : > > Here, we have a pcap with one flow, where do not recognize protocol to server, but we recognize http toclient,...

> Do you want unit tests for keyword parser ? You're right, maybe this isn't the right test for those. XD

This is most welcome! I think it would deserve a readme update.

I see that IPS mode is mentioned in the README, but didn't see a test that simulated ips mode. Shouldn't there be one, or isn't that relevant for the changes?

> > I see that IPS mode is mentioned in the README, but didn't see a test that simulated ips mode. Shouldn't there be one, or isn't that relevant for...

> * Doc update : @jufajardini what do you think about the commit doc: update example `outputs` section ? How should we make sure we do not lag behind again,...

The other failures are related to: https://github.com/OISF/suricata/pull/11041

> Some of the errors from the CI are doc building or dist check complaints. > > ``` > /__w/suricata/suricata/doc/userguide/index.rst:6:toctree contains reference to nonexisting document 'source-verification' > ``` > >...