new rule

[Chukhaltsetseg Shijirbaatar <sh_chukha () yahoo com>]

Alert tcp $HOME_NET 1024:65534
-> $EXTERNAL_NET 1024:65534 (msg: “P2P Bittorrent handshake”; flow:
to_server, established; content: “Bittorrent protocol”; offset:0; depth:19; classtype:
policy-violation; priority: 1; sid: 2000504; rev:1; )

------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!