alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET P2P Client User-Agent (Shareaza 2.x)"; flow:to_server,established; http.user_agent; content:"Shareaza 2."; depth:11; reference:url,shareaza.sourceforge.net; classtype:policy-violation; sid:2011707; rev:7; metadata:created_at 2010_07_30, confidence High, signature_severity Informational, updated_at 2020_10_19;)