alert tcp $HOME_NET 1024: -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY Gadu-Gadu IM Secure Login Server Request"; flow:established,to_server; uricontent:"/appsvc/appmsg3.asp"; uricontent:"fmnumber="; uricontent:"&version="; uricontent:"&fmt="; content:"|0d 0a|Host\: appmsg.gadu-gadu."; reference:url,piotr.trzcionkowski.pl/default.asp?load=/programy/pppgg_protokol.html; classtype:policy-violation; sid:2008296; rev:1;)

Added 2008-06-23 10:51:23 UTC


alert tcp $HOME_NET 1024: -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY Gadu-Gadu IM Secure Login Server Request"; flow:established,to_server; uricontent:"/appsvc/appmsg3.asp"; uricontent:"fmnumber="; uricontent:"&version="; uricontent:"&fmt="; content:"|0d 0a|Host\: appmsg.gadu-gadu."; reference:url,piotr.trzcionkowski.pl/default.asp?load=/programy/pppgg_protokol.html; classtype:policy-violation; sid:2008296; rev:1;)

Added 2008-06-23 10:51:23 UTC


alert tcp $HOME_NET 1024: -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY Gadu-Gadu IM Secure Login Server Request"; flow:established,to_server; uricontent:"/appsvc/appmsg3.asp"; uricontent:"fmnumber="; uricontent:"&version="; uricontent:"&fmt="; content:"|0d 0a|Host\: appmsg.gadu-gadu."; classtype:policy-violation; sid:2008296; rev:1;)

Added 2008-06-23 09:54:55 UTC


Topic revision: r1 - 2008-06-23 - TWikiGuest
 
This site is powered by the TWiki collaboration platform Powered by Perl This site is powered by the TWiki collaboration platformCopyright © Emerging Threats