""ET P2P ed2k request part""

SID: 2000332

Revision: 11

Class Type: policy-violation

Metadata: created_at 2010_07_30, updated_at 2010_12_22

Reference:

• Link

Protocol: tcp

Source Network: any

Source Port: any

Destination Network: any

Destination Port: 4660:4799

Flow: to_server,established

Contents:

• Value: "|e3|"

Offset: 1

• Value: "|00 00 00 47|"

Within: 4

PCRE:

Special Options:

source