""ET POLICY archive.org heritix Crawler User-Agent (Outbound)""

SID: 2015791

Revision: 6

Class Type: misc-activity

Metadata: created_at 2012_10_12, deployment Perimeter, deprecation_reason Age, performance_impact Low, confidence Medium, signature_severity Informational, updated_at 2023_08_09

Reference:

• Link

Protocol: tcp

Source Network: $HOME_NET

Source Port: any

Destination Network: $EXTERNAL_NET

Destination Port: $HTTP_PORTS

Flow: established,to_server

Contents:

• Value: "heritrix"

Within:

PCRE: "/^User-Agent\x3a[^\r\n]+?heritrix/Hmi"

Special Options:

• http_header

source