From 613a04d1761d0b5c3fbfbe7531bffdff2a41911e Mon Sep 17 00:00:00 2001
From: Bernhard Amann <bernhard@icsi.berkeley.edu>
Date: Thu, 17 Oct 2013 16:00:22 -0700
Subject: [PATCH] and provide a bit of motivation to try the last example.

---
 doc/frameworks/logging-input-sqlite.rst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/doc/frameworks/logging-input-sqlite.rst b/doc/frameworks/logging-input-sqlite.rst
index 7c8c848c5f..370c8d8573 100644
--- a/doc/frameworks/logging-input-sqlite.rst
+++ b/doc/frameworks/logging-input-sqlite.rst
@@ -235,3 +235,5 @@ returns with a result, we had a hit against our malware-database and output the
             Input::remove(name);
         }
 
+If you run this script against the trace in ``testing/btest/Traces/ftp/ipv4.trace``, you
+will get one hit.