[Snort-sigs] Kazaa/Morpheus/Fastrack protocol policy rule

Chris Green cmg at ...26...
Wed Dec 12 14:27:05 EST 2001

Just because I'm sure some people would like it since it's the popular
one now.  

alert tcp any any -> $HOME_NET 1214 \
(msg: "FastTrack Protocol (Morpheus/Kazaa) GET request"; \
 content: "GET "; depth: 4; flags:A+; \
 reference: url, www.musiccity.com/technology.htm; \
 reference: url, www.kazaa.com; )
Chris Green <cmg at ...26...>
Fame may be fleeting but obscurity is forever.

More information about the Snort-sigs mailing list