No subject


Thu Nov 23 16:36:19 EST 2017


alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any \
(msg:"PORN virgin"; content:"virgin "; nocase; flags:A+; \
classtype:kickass-porn; sid:1796; rev:2;)

Looks like you have a lot of packets flying around with virgin
in them.  Note the content:"virgin " portion of the rule.

-Andrew



_________________________________________________________________
Send and receive Hotmail on your mobile device: http://mobile.msn.com





More information about the Snort-users mailing list