2005 09 13 21 34 skype detection

skype detection

voice traffic

alert tcp $HOME_NET any -> any any (msg:"P2P CHAT Skype VoIP Initialization";flow:to_server,established; content:"|8046010301002d0000001000000500000400000a0000090000640000620000080000030000060100800700c0030080060040020080040080|";depth:112;classtype:policy-violation;sid:1000013; rev:1;)