Back to Rule

Rule History

SID: 2009986 • Source: et/open

Versions (4)

Version DetailsCurrent

Rev: 3Jul 30, 2010, 12:00 PM

ET P2P Octoshape UDP Session

alert udp $HOME_NET 8247 -> $EXTERNAL_NET 8247 (msg:"ET P2P Octoshape UDP Session"; threshold: type both, count 2, seconds 60, track by_src; reference:url,msmvps.com/blogs/bradley/archive/2009/01/20/peer-to-peer-on-cnn.aspx; classtype:trojan-activity; sid:2009986; rev:3; metadata:created_at 2010_07_30, confidence High, signature_severity Informational, updated_at 2022_11_03;)

Jul 30, 2010, 12:00 PM

Nov 3, 2022, 12:00 PM

Sep 21, 2024, 3:00 AM

May 30, 2025, 12:04 AM

rules/emerging-p2p.rules