alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET DELETED Outdated Mac Flash Version"; flow:established,to_server; content:"x-flash-version|3a 20|"; http_header; content:!"18,0,0,366|0d 0a|"; within:12; http_header; content:!"22,0,0,209|0d 0a|"; within:12; http_header; content:"Macintosh"; http_user_agent; threshold:type limit, count 1, seconds 60, track by_src; classtype:policy-violation; sid:2014727; rev:61; metadata:created_at 2012_05_09, signature_severity Unknown, updated_at 2020_08_20;)