<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Thank you Costas. Your comments are hugely appreciated and is exactly what I was looking for, awesome! I wanted to have separate apps but favored not to go for code repetition. With your additions it looks better now<div><br></div><div>Shortly, I will send you the pcap directly which includes both the client/server traffic.<div><br></div><div>Thanks again.</div><div>YM<br><br><div><hr id="stopSpelling">From: ckleopa@...5...<br>To: snort@...46...<br>Date: Mon, 11 May 2015 18:55:43 +0000<br>CC: snort-openappid@lists.sourceforge.net<br>Subject: Re: [Snort-openappid] BlueStacks OpenAppID Detectorþ<br><br>




YM,
<div><br>
</div>
<div>Thank you for your contribution! It would be great if you can also provide us the respective pcaps, especially the ones from the client’s traffic, if you would like these to be included as some of the new detectors of our Open Source Package. 
<div><br>
</div>
<div>From what we saw below, there were some issues which we added comments below: [ck]
<div><br>
</div>
<div>Thanks</div>
<div>Costas</div>
<div><br>
<div>
<blockquote>
<div>On May 11, 2015, at 2:18 PM, Y M <<a href="mailto:snort@...46...">snort@...46...</a>> wrote:</div>
<br class="ecxApple-interchange-newline">
<div>
<div dir="ltr" style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
Hi,</div>
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<br>
</div>
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
Since I did not find the BlueStacks app detector within the OpenAppID package, here is the code for the same detector (client_Bluestacks.lua). Any feedback (including rants :)) are welcome. Pcap can be provided if required.</div>
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<br style="line-height:21.2999992370605px;">
</div>
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">--[[</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">detection_name: BlueStacks</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">version: 1</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">description: Detector for BlueStacks (Android Emulator/App Player) application network traffic.</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">metadata: OpenAppID community</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">]]--</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;"><br style="line-height:18.4599990844727px;">
</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">require "DetectorCommon"</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">local DC = DetectorCommon</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;"><br style="line-height:18.4599990844727px;">
</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">gDetector = nil</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;"><br style="line-height:18.4599990844727px;">
</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">DetectorPackageInfo = {</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">    name = 'BlueStacks',</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">    proto = DC.ipproto.tcp,</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">    client = {</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">        init = 'DetectorInit',</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">        validate = 'DetectorValidate',</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">        clean = 'DetectorClean',</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">        minimum_matches = 1</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">    }</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">}</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;"><br style="line-height:18.4599990844727px;">
</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;"><br style="line-height:18.4599990844727px;">
</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">function DetectorInit(detectorInstance)</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">    gDetector = detectorInstance;</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;"><br style="line-height:18.4599990844727px;">
</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">    gAppId = gDetector:open_createApp('bluestacks');</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;"><br style="line-height:18.4599990844727px;">
</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">    if gDetector.open_addUrlPattern then</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">        -- An attempt to differentiate BlueStacks stages</font></div>
<div style="line-height:21.2999992370605px;"></div>
</div>
</div>
</div>
</blockquote>
<div><br>
</div>
[ck] You seem to be creating an array of a pattern list there for adding sub-classifications for blue stacks. </div>
<div>We should probably have the generic <a href="http://bluestacks.com" target="_blank">
bluestacks.com</a> URL there also:</div>
<div><br>
</div>
<div>
<blockquote>
<div dir="ltr" style="font-family:Calibri;font-size:16px;">
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2">            gDetector:open_addUrlPattern(0, 0, gAppId, "<a href="http://cdn.bluestacks.com/" target="_blank">bluestacks.com</a>", "/", "http:”),</font></div>
</div>
</div>
</blockquote>
<br>
</div>
<div><br>
</div>
<div>
<blockquote>
<div dir="ltr" style="font-family:Calibri;font-size:16px;">
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2">    gAppId = gDetector:open_createApp('bluestacks');</font></div>
</div>
</div>
</blockquote>
</div>
<div><br>
</div>
<div>[ck] Not needed since you’re calling the API function below to add the following patterns.<br>
<blockquote>
<div>
<div dir="ltr" style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">--        gUrlPatternList = {  </font></div>
</div>
</div>
</div>
</blockquote>
<br>
[ck] If you wanted new Applications for these, then we will need to have a different gAppId value defined there:</div>
<div><br>
</div>
<div>
<blockquote>
<div dir="ltr" style="font-family:Calibri;font-size:16px;">
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2">    gAppId = gDetector:open_createApp('bluestacks_update');</font></div>
</div>
</div>
</blockquote>
<blockquote>
<div>
<div dir="ltr" style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">            -- BlueStacks Update</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">            gDetector:open_addUrlPattern(0, 0, gAppId, "<a href="http://cdn.bluestacks.com/" target="_blank">cdn.bluestacks.com</a>",
 "/updates/", "http:”),</font></div>
<div style="line-height:21.2999992370605px;"></div>
</div>
</div>
</div>
</blockquote>
[ck] added<br>
<div>
<blockquote>
<div dir="ltr" style="font-family:Calibri;font-size:16px;">
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2">    gAppId = gDetector:open_createApp('bluestacks_download');</font></div>
</div>
</div>
</blockquote>
</div>
<blockquote>
<div>
<div dir="ltr" style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">            -- BlueStacks Download components</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">            gDetector:open_addUrlPattern(0, 0, gAppId, "<a href="http://cdn.bluestacks.com/" target="_blank">cdn.bluestacks.com</a>",
 "/downloads/", "http:”),</font></div>
<div style="line-height:21.2999992370605px;"></div>
</div>
</div>
</div>
</blockquote>
<div>[ck] added</div>
<div>
<blockquote>
<div dir="ltr" style="font-family:Calibri;font-size:16px;">
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2">    gAppId = gDetector:open_createApp('bluestacks_apps');</font></div>
</div>
</div>
</blockquote>
</div>
<br>
<blockquote>
<div>
<div dir="ltr" style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">            -- BlueStacks Apps</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">            gDetector:open_addUrlPattern(0, 0, gAppId, "<a href="http://opasanet.appspot.com/" target="_blank">opasanet.appspot.com</a>",
 "/op/", "http:”)</font></div>
</div>
</div>
</div>
</blockquote>
<div><br>
</div>
[ck] removed array list.<br>
<blockquote>
<div>
<div dir="ltr" style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">--        }</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">    end</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;"><br style="line-height:18.4599990844727px;">
</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">    if gDetector.open_addHttpPattern then</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">        gDetector:open_addHttpPattern(2, 5, 0, gAppId, 0, 'BlueStacks’);</font></div>
</div>
</div>
</div>
</blockquote>
<div><br>
</div>
[ck] this below is not needed since the one above is covering for it.</div>
<div><br>
</div>
<div><span style="font-family:'Courier New', sans-serif;font-size:small;color:rgb(68, 68, 68);background-color:rgb(255, 255, 255);">--        gDetector:open_addHttpPattern(2, 5, 0, gAppId, 0, "BlueStacks/");</span>
<blockquote>
<div dir="ltr" style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">    end</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;"><br style="line-height:18.4599990844727px;">
</font></div>
</div>
</div>
</blockquote>
[ck] This for loop below is not needed since you have added these patterns already in the addURLPattern call above.<br>
<blockquote>
<div dir="ltr" style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">    if gDetector.open_addUrlPattern then</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">         for i,v in ipairs(gUrlPatternList) do</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">            gDetector:addAppUrl(v[1],v[2],v[3],v[4],v[5],v[6]);</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">        end</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">    end</font></div>
</div>
</div>
</blockquote>
[ck] — end remove.<br>
<br>
<blockquote>
<div dir="ltr" style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">    return gDetector;</font></div>
</div>
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">end</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;"><br style="line-height:18.4599990844727px;">
</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">function DetectorValidator()</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">    local context = {}</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">    return clientFail(context)</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">end</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;"><br style="line-height:18.4599990844727px;">
</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">function DetectorFini()</font></div>
<div style="line-height:21.2999992370605px;"><font face="Courier New, sans-serif" size="2" style="line-height:normal;">end</font></div>
</div>
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<font face="Courier New, sans-serif" size="2" style="line-height:normal;"><br style="line-height:18.4599990844727px;">
</font></div>
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<font size="3" style="line-height:normal;">Thanks.</font></div>
<div style="line-height:21.2999992370605px;color:rgb(68, 68, 68);font-size:15px;background-color:rgb(255, 255, 255);">
<font size="3" style="line-height:normal;">YM</font></div>
</div>
<span style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;display:inline !important;">------------------------------------------------------------------------------</span><br style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<span style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;display:inline !important;">One
 dashboard for servers and applications across Physical-Virtual-Cloud<span class="ecxApple-converted-space"> </span></span><br style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<span style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;display:inline !important;">Widest
 out-of-the-box monitoring support with 50+ applications</span><br style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<span style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;display:inline !important;">Performance
 metrics, stats and reports that give you Actionable Insights</span><br style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<span style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;display:inline !important;">Deep
 dive visibility with transaction tracing using APM Insight.</span><br style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<a href="http://ad.doubleclick.net/ddm/clk/290420510%3b117567292%3by_______________________________________________" style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;" target="_blank">http://ad.doubleclick.net/ddm/clk/290420510;117567292;y_______________________________________________</a><br style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<span style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;display:inline !important;">Snort-openappid
 mailing list</span><br style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<a href="mailto:Snort-openappid@lists.sourceforge.net" style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">Snort-openappid@lists.sourceforge.net</a><br style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<a href="https://lists.sourceforge.net/lists/listinfo/snort-openappid" style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;" target="_blank">https://lists.sourceforge.net/lists/listinfo/snort-openappid</a><br style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<br style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;">
<span style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;display:inline !important;">Please
 visit<span class="ecxApple-converted-space"> </span></span><a href="http://blog.snort.org/" style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;" target="_blank">http://blog.snort.org</a><span style="font-family:Calibri;font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;display:inline !important;"><span class="ecxApple-converted-space"> </span>to
 stay current on all the latest Snort news!</span></blockquote>
</div>
<br>
</div>
</div>
</div>


<br>------------------------------------------------------------------------------
One dashboard for servers and applications across Physical-Virtual-Cloud 
Widest out-of-the-box monitoring support with 50+ applications
Performance metrics, stats and reports that give you Actionable Insights
Deep dive visibility with transaction tracing using APM Insight.
http://ad.doubleclick.net/ddm/clk/290420510;117567292;y<br>_______________________________________________
Snort-openappid mailing list
Snort-openappid@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-openappid

Please visit http://blog.snort.org to stay current on all the latest Snort news!</div></div></div>                                      </div></body>
</html>