""ET CHAT IRC USER command""

SID: 2002023

Revision: 15

Class Type: misc-activity

Metadata: created_at 2010_07_30, updated_at 2011_10_21

Reference:

Protocol: tcp

Source Network: any

Source Port: any

Destination Network: any

Destination Port: 6666:7000

Flow: to_server,established

Contents:

  • Value: "USER|20|" Depth: 5

  • Value: "|203a|"

  • Value: "|0a|"

Within: 40

PCRE:

Special Options:

  • nocase

source