alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET P2P ABC Torrent User-Agent (ABC/ABC-3.1.0)"; flow:established,to_server; http.user_agent; content:"ABC/ABC"; startswith; nocase; reference:url,pingpong-abc.sourceforge.net; classtype:trojan-activity; sid:2003475; rev:9; metadata:created_at 2010_07_30, confidence High, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_12;)