alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET P2P LimeWire P2P Traffic"; flow:established,to_server; http.user_agent; content:"LimeWire"; startswith; nocase; reference:url,www.limewire.com; classtype:policy-violation; sid:2001808; rev:10; metadata:created_at 2010_07_30, deprecation_reason Relevance, confidence High, signature_severity Informational, updated_at 2024_03_25, reviewed_at 2024_03_25;)