[Snort-sigs] Bit Torrent signature
cmg at ...435...
Tue Jun 17 06:16:05 EDT 2003
Jukka Juslin <jtjuslin at ...1151...> writes:
> Dear all,
> Does anybody have a signature for Bit Torrent? AFAIK, Bit Torrent is
> popular for transfers of DVD movies etc.
Yeah Bit Torrent is awesome for Etree. I just wish there
was a nice server low load that could start replacing FTPds like
You can probably do a signature for
alert tcp $HOME_NET any -> $EXTERNAL_NET any \
(msg: "Someone's finding torrent files "; content: ".torrent"; \
Chris Green <cmg at ...435...>
Don't use a big word where a diminutive one will suffice.
More information about the Snort-sigs