No subject

Thu Nov 23 16:36:19 EST 2017

alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any \
(msg:"PORN virgin"; content:"virgin "; nocase; flags:A+; \
classtype:kickass-porn; sid:1796; rev:2;)

Looks like you have a lot of packets flying around with virgin
in them.  Note the content:"virgin " portion of the rule.


Send and receive Hotmail on your mobile device:

More information about the Snort-users mailing list