1833.txt

snort入侵检测规则文件2.4 Snort是众所周知的网络入侵检测工具

Rule:  
--
Sid:

1833

--
Summary:
This rule indicates that a webpage was visited the included the content "naked lesbians".

--
Impact:
Someone could be violating your company's policy regarding the browsing of inappropriate content.

--
Detailed Information:

This rule looks for a response from a webserver containing "naked lesbians".

--
Affected Systems:

All

--
Attack Scenarios:

Not an attack.  

--
Ease of Attack:

N/A.

--
False Positives:

This could have been caused by a pop-up window or spam with an embedded link to a pornographic website.  This could also be caused by somebody visiting the snort rule descriptions on the snort website. etc.etc.

--
False Negatives:

None known.
--
Corrective Action:

Dependent on your company's policies.   

--
Contributors:
Sourcefire Research Team
Brian Caswell <[e-mail]>
Nigel Houghton <[e-mail]>
Snort documentation contributed by Steven Alexander<[e-mail]>
-- 
Additional References:







--