View Single Post
  #8 (permalink)  
Old 06-21-2009, 04:30 PM
dmzalarm dmzalarm is offline
Senior Member
 
Join Date: Jul 2008
Posts: 121
Default

In Astaro, it is "POLICY Google Chat web client connection"

In standard snort installation, it is "alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"POLICY Google Chat web client connection"; flow:established,to_server; uricontent:"/talkgadget/popout"; nocase; classtypeolicy-violation; sid:12303; rev:3"