alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET POLICY Facebook Like Button Clicked (2)"; flow:established,to_server; http.uri; content:"/plugins/like.php?"; content:"href="; content:"action=like"; http.host; bsize:16; content:"www.facebook.com"; startswith; reference:url,developers.facebook.com/docs/reference/plugins/like/; reference:url,news.cnet.com/8301-1023_3-20094866-93/facebooks-like-button-illegal-in-german-state/; classtype:policy-violation; sid:2013459; rev:3; metadata:created_at 2011_08_26, confidence High, signature_severity Informational, updated_at 2024_02_07;)