alert tcp $HOME_NET any -> $EXTERNAL_NET 82 (msg:"ET DELETED LDPinch Checkin on Port 82"; flow:established,to_server; content:".php"; nocase; content:"a="; content:"&b=Pinch"; distance:0; content:"&d="; distance:0; content:"&c="; distance:0; classtype:trojan-activity; sid:2008354; rev:4; metadata:created_at 2010_07_30, signature_severity Unknown, updated_at 2019_07_26;)