ET POLICY GNU/Linux YUM User-Agent Outbound likely related to package management

SID: 2013505Rev: 41 views
History
Sourceet/open
CreatedSeptember 2, 2011
UpdatedApril 22, 2020
Classificationpolicy-violation
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET POLICY GNU/Linux YUM User-Agent Outbound likely related to package management"; flow:established,to_server; threshold:type limit, track by_src, count 1, seconds 300; http.user_agent; content:"|20|yum|2F|"; reference:url,www.phy.duke.edu/~rgb/General/yum_HOWTO/yum_HOWTO/; classtype:policy-violation; sid:2013505; rev:4; metadata:created_at 2011_09_02, confidence High, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2020_04_22;)

References

urlwww.phy.duke.edu/~rgb/General/yum_HOWTO/yum_HOWTO/

Metadata

created at2011_09_02
confidenceHigh
signature severityInformational
tagDescription_Generated_By_Proofpoint_Nexus
updated at2020_04_22

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!