alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET POLICY Facebook Like Button Clicked (1)"; flow:established,to_server; http.uri; content:"/uiserver.php?social_plugin=like"; content:"external_page_url="; http.host; bsize:16; content:"www.facebook.com"; reference:url,developers.facebook.com/docs/reference/plugins/like/; reference:url,news.cnet.com/8301-1023_3-20094866-93/facebooks-like-button-illegal-in-german-state/; classtype:policy-violation; sid:2013458; rev:3; metadata:created_at 2011_08_25, confidence High, signature_severity Informational, updated_at 2024_02_07;)