""ET POLICY IRC DCC file transfer request on non-std port""
SID: 2000349
Revision: 13
Class Type: non-standard-protocol
Metadata: created_at 2010_07_30, updated_at 2016_05_12
Reference:
Protocol: tcp
Source Network: $HOME_NET
Source Port: any
Destination Network: any
Destination Port: !6666:7000
Flow: to_server,established
Contents:
-
Value: "PRIVMSG " Depth: 8
-
Value: " |3a|.DCC SEND"
Within:
PCRE:
Special Options:
- nocase