alert http2 any any -> any any (msg:"ET DOS HTTP2 Excessive Stream Resets"; reference:url,blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/; reference:cve,2023-44487; classtype:attempted-dos; sid:2072514; rev:1; metadata:attack_target Web_Server, tls_state TLSDecrypt, created_at 2026_10_19, cve CVE_2023_44487, deployment Perimeter, performance_impact Moderate, confidence Low, signature_severity Major, updated_at 2026_10_19;)