Thu Nov 23 16:36:19 EST 2017
alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any \
(msg:"PORN virgin"; content:"virgin "; nocase; flags:A+; \
classtype:kickass-porn; sid:1796; rev:2;)
Looks like you have a lot of packets flying around with virgin
in them. Note the content:"virgin " portion of the rule.
Send and receive Hotmail on your mobile device: http://mobile.msn.com
More information about the Snort-users