Google Captcha Signature

[Gregory Zill <gregory () r3g net>]

Has there been a signature developed to track internal hosts generating the
excessive outbound requests to Google via one NAT, which subsequently
triggers the captcha. It is reported that proxied or infected traffic
produces the high-volume and I am only trying to catch the latter. Any ideas
would be appreciated.

-- 
“I think we all have a little voice inside us that will guide us… if we shut
out all the noise and clutter from our lives and listen to that voice, it
will tell us the right thing to do.”
~Christopher Reeve

Gregory W Zill, MBA, CISSP

------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users