1317.txt

snort入侵检测规则文件2.4 Snort是众所周知的网络入侵检测工具

Rule:  
--
Sid:

1317

--
Summary:
This rule indicates that a webpage was visited the included the content "anal sex".

--
Impact:
Someone could be violating your company's policy regarding the browsing of inappropriate content.

--
Detailed Information:

This rule looks for a response from a webserver containing "anal sex".

--
Affected Systems:

All

--
Attack Scenarios:

Not an attack.  

--
Ease of Attack:

N/A.

--
False Positives:

This could have been caused by a pop-up window or spam with an embedded link to a pornographic website.  This could also be caused by somebody visiting the snort rule descriptions on the snort website.  This rule could trigger on a medical website or any site discussing sex, pornographic or not.

--
False Negatives:

None known.
--
Corrective Action:

Dependent on your company's policies.   

--
Contributors:
Sourcefire Research Team
Brian Caswell <[e-mail]>
Nigel Houghton <[e-mail]>
Snort documentation contributed by Steven Alexander<[e-mail]>
-- 
Additional References:







--