""ET CHAT ICQ Status Change (2)""

SID: 2001803

Revision: 6

Class Type: policy-violation

Metadata: created_at 2010_07_30, updated_at 2010_07_30

Reference:

Protocol: tcp

Source Network: $HOME_NET

Source Port: any

Destination Network: $EXTERNAL_NET

Destination Port: 5190

Flow: from_client,established

Contents:

  • Value: "|2A02|" Depth: 2

  • Value: "|00120001001E|" Depth: 6 Offset: 4

Within:

PCRE:

Special Options:

source