[Snort-sigs] new rule

Chukhaltsetseg Shijirbaatar sh_chukha at ...144...
Fri May 24 15:55:36 EDT 2013


Alert tcp $HOME_NET any
-> $ EXTERNAL_NET any (msg: “P2P Bittorrent Metafile”; flow: to_server,
established; content: “/announce”; offset:0; dsize:>122; reference: url, http://tracker.mininova.org; classtype:policy-violation; priority:1;
sid: 2000507; rev:1; );
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20130524/07d130b2/attachment.html>


More information about the Snort-sigs mailing list