[Snort-sigs] new rule

Chukhaltsetseg Shijirbaatar sh_chukha at ...144...
Fri May 24 14:51:24 EDT 2013


Alert tcp $HOME_NET 1024:65534
-> $EXTERNAL_NET 1024:65534 (msg: “P2P Bittorrent handshake”; flow:
to_server, established; content: “Bittorrent protocol”; offset:0; depth:19; classtype:
policy-violation; priority: 1; sid: 2000504; rev:1; )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20130524/d9f2ebb4/attachment.html>


More information about the Snort-sigs mailing list