""GPL CHAT Yahoo IM voicechat""

SID: 2102451

Revision: 4

Class Type: policy-violation

Metadata: created_at 2010_09_23, updated_at 2012_09_01

Reference:

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: 5050

Destination Network: $HOME_NET

Destination Port: any

Flow: from_server,established

Contents:

  • Value: "YMSG" Depth: 4

  • Value: "|00|J" Depth: 2 Offset: 10

Within:

PCRE:

Special Options:

  • nocase

source