diff --git a/docs/Analyzers.md b/docs/Analyzers.md
index a3b5728..b2e8917 100644
--- a/docs/Analyzers.md
+++ b/docs/Analyzers.md
@@ -224,7 +224,8 @@ Example for blocking all SSH connections:
         772,
         771
       ],
-      "version": 771
+      "version": 771,
+      "ech": true
     },
     "resp": {
       "cipher": 4866,