alert tcp any any -> any any (msg:"3COM-TSMUX"; appid:3com-tsmux; sid:1000000; rev:1)
alert tcp any any -> any any (msg:"914CG"; appid:914cg; sid:1000001; rev:1)
alert tcp any any -> any any (msg:"ACA Services"; appid:aca_services; sid:1000002; rev:1)
alert tcp any any -> any any (msg:"ACI"; appid:aci; sid:1000003; rev:1)
alert tcp any any -> any any (msg:"ACR-NEMA"; appid:acr-nema; sid:1000004; rev:1)
alert tcp any any -> any any (msg:"ActiveSync"; appid:activesync; sid:1000005; rev:1)
alert tcp any any -> any any (msg:"ADrive"; appid:adrive; sid:1000006; rev:1)
alert tcp any any -> any any (msg:"AED512"; appid:aed512; sid:1000007; rev:1)
alert tcp any any -> any any (msg:"AFP"; appid:afp; sid:1000008; rev:1)
alert tcp any any -> any any (msg:"AJP"; appid:ajp; sid:1000009; rev:1)
alert tcp any any -> any any (msg:"Alias"; appid:alias; sid:1000010; rev:1)
alert tcp any any -> any any (msg:"Amazon"; appid:amazon; sid:1000011; rev:1)
alert tcp any any -> any any (msg:"ANSA Notify"; appid:ansa_notify; sid:1000012; rev:1)
alert tcp any any -> any any (msg:"ANSA REX Trader"; appid:ansa_rex_trader; sid:1000013; rev:1)
alert tcp any any -> any any (msg:"Applejuice"; appid:applejuice; sid:1000014; rev:1)
alert tcp any any -> any any (msg:"AppleShare"; appid:appleshare; sid:1000015; rev:1)
alert tcp any any -> any any (msg:"Apple Update"; appid:apple_update; sid:1000016; rev:1)
alert tcp any any -> any any (msg:"ARCISDMS"; appid:arcisdms; sid:1000017; rev:1)
alert tcp any any -> any any (msg:"Ariel"; appid:ariel; sid:1000018; rev:1)
alert tcp any any -> any any (msg:"ARNS"; appid:arns; sid:1000019; rev:1)
alert tcp any any -> any any (msg:"ASA"; appid:asa; sid:1000020; rev:1)
alert tcp any any -> any any (msg:"Astraweb"; appid:astraweb; sid:1000021; rev:1)
alert tcp any any -> any any (msg:"Astraweb"; appid:auditd; sid:1000022; rev:1)
alert tcp any any -> any any (msg:"AUDIT"; appid:audit; sid:1000023; rev:1)
alert tcp any any -> any any (msg:"AVG"; appid:avg; sid:1000024; rev:1)
alert tcp any any -> any any (msg:"Avira Download/Update"; appid:avira_download; sid:1000025; rev:1)
alert tcp any any -> any any (msg:"Avocent"; appid:avocent; sid:1000026; rev:1)
alert tcp any any -> any any (msg:"Backblaze"; appid:backblaze; sid:1000027; rev:1)
alert tcp any any -> any any (msg:"Backpack"; appid:backpack; sid:1000028; rev:1)
alert tcp any any -> any any (msg:"Battlefield"; appid:battlefield; sid:1000029; rev:1)
alert tcp any any -> any any (msg:"BFTP"; appid:bftp; sid:1000030; rev:1)
alert tcp any any -> any any (msg:"BGMP"; appid:bgmp; sid:1000031; rev:1)
alert tcp any any -> any any (msg:"BH611"; appid:bh611; sid:1000032; rev:1)
alert tcp any any -> any any (msg:"BHEVENT"; appid:bhevent; sid:1000033; rev:1)
alert tcp any any -> any any (msg:"BHFHS"; appid:bhfhs; sid:1000034; rev:1)
alert tcp any any -> any any (msg:"BHMDS"; appid:bhmds; sid:1000035; rev:1)
alert tcp any any -> any any (msg:"Bing"; appid:bing; sid:1000036; rev:1)
alert tcp any any -> any any (msg:"BitDefender"; appid:bitdefender; sid:1000037; rev:1)
alert tcp any any -> any any (msg:"BITS"; appid:bits; sid:1000038; rev:1)
alert tcp any any -> any any (msg:"BitTorrent"; appid:bt; sid:1000039; rev:1)
alert tcp any any -> any any (msg:"Blackboard"; appid:blackboard; sid:1000040; rev:1)
alert tcp any any -> any any (msg:"Blackjack Protocol"; appid:blackjack_protocol; sid:1000041; rev:1)
alert tcp any any -> any any (msg:"BlazeFS"; appid:blazefs; sid:1000042; rev:1)
alert tcp any any -> any any (msg:"Britton Lee IDM"; appid:britton_lee_idm; sid:1000043; rev:1)
alert tcp any any -> any any (msg:"Bnet"; appid:bnet; sid:1000044; rev:1)
alert tcp any any -> any any (msg:"Cableport AX"; appid:cableport_ax; sid:1000045; rev:1)
alert tcp any any -> any any (msg:"CAICCI"; appid:caicci; sid:1000046; rev:1)
alert tcp any any -> any any (msg:"CAP"; appid:cap; sid:1000047; rev:1)
alert tcp any any -> any any (msg:"CDC"; appid:cdc; sid:1000048; rev:1)
alert tcp any any -> any any (msg:"Check Point"; appid:checkpoint; sid:1000049; rev:1)
alert tcp any any -> any any (msg:"Cisco DRP"; appid:cisco_drp; sid:1000050; rev:1)
alert tcp any any -> any any (msg:"Cisco FNATIVE"; appid:cisco_fnative; sid:1000051; rev:1)
alert tcp any any -> any any (msg:"Cisco GDP"; appid:cisco_gdp; sid:1000052; rev:1)
alert tcp any any -> any any (msg:"Cisco SLA"; appid:cisco_sla; sid:1000053; rev:1)
alert tcp any any -> any any (msg:"Cisco SYSMAINT"; appid:cisco_sysmaint; sid:1000054; rev:1)
alert tcp any any -> any any (msg:"Cisco TNATIVE"; appid:cisco_tnative; sid:1000055; rev:1)
alert tcp any any -> any any (msg:"Citrix IMA"; appid:citrix_ima; sid:1000056; rev:1)
alert tcp any any -> any any (msg:"Citrix Licensing"; appid:citrix_licensing; sid:1000057; rev:1)
alert tcp any any -> any any (msg:"Citrix Online"; appid:citrix_online; sid:1000058; rev:1)
alert tcp any any -> any any (msg:"Citrix RTMP"; appid:citrix_rtmp; sid:1000059; rev:1)
alert tcp any any -> any any (msg:"Citrix SLG"; appid:citrix_slg; sid:1000060; rev:1)
alert tcp any any -> any any (msg:"Citrix WANScaler"; appid:citrix_wanscaler; sid:1000061; rev:1)
alert tcp any any -> any any (msg:"CL1"; appid:cl1; sid:1000062; rev:1)
alert tcp any any -> any any (msg:"Clearcase"; appid:clearcase; sid:1000063; rev:1)
alert tcp any any -> any any (msg:"CLOANTO"; appid:cloanto; sid:1000064; rev:1)
alert tcp any any -> any any (msg:"CMIP"; appid:cmip; sid:1000065; rev:1)
alert tcp any any -> any any (msg:"Coda Auth"; appid:coda_auth; sid:1000066; rev:1)
alert tcp any any -> any any (msg:"Commvault"; appid:commvault; sid:1000067; rev:1)
alert tcp any any -> any any (msg:"CompressNET"; appid:compressnet; sid:1000068; rev:1)
alert tcp any any -> any any (msg:"COMSCM"; appid:comscm; sid:1000069; rev:1)
alert tcp any any -> any any (msg:"CORBA"; appid:corba; sid:1000070; rev:1)
alert tcp any any -> any any (msg:"DASP"; appid:dasp; sid:1000071; rev:1)
alert tcp any any -> any any (msg:"DATEX-ASN"; appid:datex-asn; sid:1000072; rev:1)
alert tcp any any -> any any (msg:"dBase"; appid:dbase; sid:1000073; rev:1)
alert tcp any any -> any any (msg:"DCAP"; appid:dcap; sid:1000074; rev:1)
alert tcp any any -> any any (msg:"DCCP"; appid:dccp; sid:1000075; rev:1)
alert tcp any any -> any any (msg:"DCP"; appid:dcp; sid:1000076; rev:1)
alert tcp any any -> any any (msg:"DEC Auth"; appid:dec_auth; sid:1000077; rev:1)
alert tcp any any -> any any (msg:"DEC LaDebug"; appid:dec_ladebug; sid:1000078; rev:1)
alert tcp any any -> any any (msg:"DECVMS"; appid:decvms; sid:1000079; rev:1)
alert tcp any any -> any any (msg:"DEOS"; appid:deos; sid:1000080; rev:1)
alert tcp any any -> any any (msg:"DHCPv6"; appid:dhcpv6-server; sid:1000081; rev:1)
alert tcp any any -> any any (msg:"Digg"; appid:digg; sid:1000082; rev:1)
alert tcp any any -> any any (msg:"Direct Connect"; appid:direct_connect; sid:1000083; rev:1)
alert tcp any any -> any any (msg:"PDRE"; appid:pdre; sid:1000084; rev:1)
alert tcp any any -> any any (msg:"DIXIE"; appid:dixie; sid:1000085; rev:1)
alert tcp any any -> any any (msg:"DLS"; appid:dls; sid:1000086; rev:1)
alert tcp any any -> any any (msg:"DNA-CML"; appid:dna-cml; sid:1000087; rev:1)
alert tcp any any -> any any (msg:"DNSIX"; appid:dnsix; sid:1000088; rev:1)
alert tcp any any -> any any (msg:"DPSI"; appid:dpsi; sid:1000089; rev:1)
alert tcp any any -> any any (msg:"Dropbox"; appid:dropbox; sid:1000090; rev:1)
alert tcp any any -> any any (msg:"DSFGW"; appid:dsfgw; sid:1000091; rev:1)
alert tcp any any -> any any (msg:"DSP3270"; appid:dsp3270; sid:1000092; rev:1)
alert tcp any any -> any any (msg:"DSP"; appid:dsp; sid:1000093; rev:1)
alert tcp any any -> any any (msg:"DTAG"; appid:dtag; sid:1000094; rev:1)
alert tcp any any -> any any (msg:"DTK"; appid:dtk; sid:1000095; rev:1)
alert tcp any any -> any any (msg:"eBay"; appid:ebay; sid:1000096; rev:1)
alert tcp any any -> any any (msg:"eBay Bid"; appid:ebay_bid; sid:1000097; rev:1)
alert tcp any any -> any any (msg:"eBay Search"; appid:ebay_search; sid:1000098; rev:1)
alert tcp any any -> any any (msg:"eBay Watch"; appid:ebay_watch; sid:1000099; rev:1)
alert tcp any any -> any any (msg:"eBuddy"; appid:ebuddy; sid:1000100; rev:1)
alert tcp any any -> any any (msg:"EMBLNDT"; appid:emblndt; sid:1000101; rev:1)
alert tcp any any -> any any (msg:"EMFIS Data"; appid:emfis_data; sid:1000102; rev:1)
alert tcp any any -> any any (msg:"EntrustTime"; appid:entrusttime; sid:1000103; rev:1)
alert tcp any any -> any any (msg:"ERPC"; appid:erpc; sid:1000104; rev:1)
alert tcp any any -> any any (msg:"Eset"; appid:eset; sid:1000105; rev:1)
alert tcp any any -> any any (msg:"ESRO"; appid:esro; sid:1000106; rev:1)
alert tcp any any -> any any (msg:"ETOS"; appid:etos; sid:1000107; rev:1)
alert tcp any any -> any any (msg:"Facebook Apps"; appid:facebook_apps; sid:1000108; rev:1)
alert tcp any any -> any any (msg:"Fark"; appid:fark; sid:1000109; rev:1)
alert tcp any any -> any any (msg:"FastTrack"; appid:fasttrack; sid:1000110; rev:1)
alert tcp any any -> any any (msg:"Fatmen"; appid:fatmen; sid:1000111; rev:1)
alert tcp any any -> any any (msg:"FileMaker"; appid:filemaker; sid:1000112; rev:1)
alert tcp any any -> any any (msg:"FlashGet"; appid:flashget; sid:1000113; rev:1)
alert tcp any any -> any any (msg:"Flickr"; appid:flickr; sid:1000114; rev:1)
alert tcp any any -> any any (msg:"Flixster"; appid:flixster; sid:1000115; rev:1)
alert tcp any any -> any any (msg:"FogBugz"; appid:fogbugz; sid:1000116; rev:1)
alert tcp any any -> any any (msg:"F-Prot"; appid:f-prot; sid:1000117; rev:1)
alert tcp any any -> any any (msg:"FreeCast"; appid:freecast; sid:1000118; rev:1)
alert tcp any any -> any any (msg:"FriendFeed"; appid:friendfeed; sid:1000119; rev:1)
alert tcp any any -> any any (msg:"FTP"; appid:ftp; sid:1000120; rev:1)
alert tcp any any -> any any (msg:"FTP Data"; appid:ftp-data; sid:1000121; rev:1)
alert tcp any any -> any any (msg:"FTPS Data"; appid:ftpsdata; sid:1000122; rev:1)
alert tcp any any -> any any (msg:"FTPS"; appid:ftps; sid:1000123; rev:1)
alert tcp any any -> any any (msg:"FXP"; appid:fxp; sid:1000124; rev:1)
alert tcp any any -> any any (msg:"GACP"; appid:gacp; sid:1000125; rev:1)
alert tcp any any -> any any (msg:"Ganglia"; appid:ganglia; sid:1000126; rev:1)
alert tcp any any -> any any (msg:"Genie"; appid:genie; sid:1000127; rev:1)
alert tcp any any -> any any (msg:"GENRAD"; appid:genrad; sid:1000128; rev:1)
alert tcp any any -> any any (msg:"Giganews"; appid:giganews; sid:1000129; rev:1)
alert tcp any any -> any any (msg:"GIOP"; appid:giop; sid:1000130; rev:1)
alert tcp any any -> any any (msg:"GIST"; appid:gist; sid:1000131; rev:1)
alert tcp any any -> any any (msg:"Google APIs"; appid:google_apis; sid:1000132; rev:1)
alert tcp any any -> any any (msg:"Google App Engine"; appid:google_app_engine; sid:1000133; rev:1)
alert tcp any any -> any any (msg:"Google Drive"; appid:google_drive; sid:1000134; rev:1)
alert tcp any any -> any any (msg:"Google Talk Gadget"; appid:google_talk_gadget; sid:1000135; rev:1)
alert tcp any any -> any any (msg:"Google"; appid:google; sid:1000136; rev:1)
alert tcp any any -> any any (msg:"Google Translate"; appid:google_translate; sid:1000137; rev:1)
alert tcp any any -> any any (msg:"GoToMeeting"; appid:gotomeeting; sid:1000138; rev:1)
alert tcp any any -> any any (msg:"GPFS"; appid:gpfs; sid:1000139; rev:1)
alert tcp any any -> any any (msg:"Groupwise"; appid:groupwise; sid:1000140; rev:1)
alert tcp any any -> any any (msg:"Gss X License Verification"; appid:gss_x_license_verification; sid:1000141; rev:1)
alert tcp any any -> any any (msg:"ITU H.225"; appid:itu-h225; sid:1000142; rev:1)
alert tcp any any -> any any (msg:"ITU H.245"; appid:itu-h245; sid:1000143; rev:1)
alert tcp any any -> any any (msg:"Hassle"; appid:hassle; sid:1000144; rev:1)
alert tcp any any -> any any (msg:"HDAP"; appid:hdap; sid:1000145; rev:1)
alert tcp any any -> any any (msg:"HEMS"; appid:hems; sid:1000146; rev:1)
alert tcp any any -> any any (msg:"HiveStor"; appid:hivestor; sid:1000147; rev:1)
alert tcp any any -> any any (msg:"HL7"; appid:hl7; sid:1000148; rev:1)
alert tcp any any -> any any (msg:"Windows Live Hotmail"; appid:winlive_hotmail; sid:1000149; rev:1)
alert tcp any any -> any any (msg:"HP Perf"; appid:hp_perf; sid:1000150; rev:1)
alert tcp any any -> any any (msg:"HP VMM"; appid:hp_vmm; sid:1000151; rev:1)
alert tcp any any -> any any (msg:"HTTPMGT"; appid:httpmgt; sid:1000152; rev:1)
alert tcp any any -> any any (msg:"Hyper-G"; appid:hyper-g; sid:1000153; rev:1)
alert tcp any any -> any any (msg:"IASD"; appid:iasd; sid:1000154; rev:1)
alert tcp any any -> any any (msg:"ICA Browser"; appid:ica_browser; sid:1000155; rev:1)
alert tcp any any -> any any (msg:"ICAD"; appid:icad; sid:1000156; rev:1)
alert tcp any any -> any any (msg:"ICAP"; appid:icap; sid:1000157; rev:1)
alert tcp any any -> any any (msg:"ICA"; appid:ica; sid:1000158; rev:1)
alert tcp any any -> any any (msg:"IceShare"; appid:iceshare; sid:1000159; rev:1)
alert tcp any any -> any any (msg:"ICP"; appid:icp; sid:1000160; rev:1)
alert tcp any any -> any any (msg:"ICQ2Go"; appid:icq2go; sid:1000161; rev:1)
alert tcp any any -> any any (msg:"IKE"; appid:isakmp; sid:1000162; rev:1)
alert tcp any any -> any any (msg:"IMGames"; appid:imgames; sid:1000163; rev:1)
alert tcp any any -> any any (msg:"IMSP"; appid:imsp; sid:1000164; rev:1)
alert tcp any any -> any any (msg:"InBusiness"; appid:inbusiness; sid:1000165; rev:1)
alert tcp any any -> any any (msg:"Informix"; appid:informix; sid:1000166; rev:1)
alert tcp any any -> any any (msg:"InfoSeek"; appid:infoseek; sid:1000167; rev:1)
alert tcp any any -> any any (msg:"IngresNET"; appid:ingresnet; sid:1000168; rev:1)
alert tcp any any -> any any (msg:"IngresNET"; appid:ircu; sid:1000169; rev:1)
alert tcp any any -> any any (msg:"ISI Graphics"; appid:isi_graphics; sid:1000170; rev:1)
alert tcp any any -> any any (msg:"Jargon"; appid:jargon; sid:1000171; rev:1)
alert tcp any any -> any any (msg:"Kaspersky"; appid:kaspersky; sid:1000172; rev:1)
alert tcp any any -> any any (msg:"K-Block"; appid:k-block; sid:1000173; rev:1)
alert tcp any any -> any any (msg:"KFTPDATA"; appid:kftpdata; sid:1000174; rev:1)
alert tcp any any -> any any (msg:"KFTP"; appid:kftp; sid:1000175; rev:1)
alert tcp any any -> any any (msg:"KIS"; appid:kis; sid:1000176; rev:1)
alert tcp any any -> any any (msg:"KNETCMP"; appid:knetcmp; sid:1000177; rev:1)
alert tcp any any -> any any (msg:"Kryptolan"; appid:kryptolan; sid:1000178; rev:1)
alert tcp any any -> any any (msg:"Ktelnet"; appid:ktelnet; sid:1000179; rev:1)
alert tcp any any -> any any (msg:"Kugou"; appid:kugou; sid:1000180; rev:1)
alert tcp any any -> any any (msg:"KVM"; appid:kvm; sid:1000181; rev:1)
alert tcp any any -> any any (msg:"KWDB"; appid:kwdb; sid:1000182; rev:1)
alert tcp any any -> any any (msg:"L2TP"; appid:l2tp; sid:1000183; rev:1)
alert tcp any any -> any any (msg:"Last.fm"; appid:last.fm; sid:1000184; rev:1)
alert tcp any any -> any any (msg:"Legent"; appid:legent; sid:1000185; rev:1)
alert tcp any any -> any any (msg:"LINK"; appid:link; sid:1000186; rev:1)
alert tcp any any -> any any (msg:"Live365"; appid:live365; sid:1000187; rev:1)
alert tcp any any -> any any (msg:"LLMNR"; appid:llmnr; sid:1000188; rev:1)
alert tcp any any -> any any (msg:"Locus Map"; appid:locus_map; sid:1000189; rev:1)
alert tcp any any -> any any (msg:"LogMeIn"; appid:logmein; sid:1000190; rev:1)
alert tcp any any -> any any (msg:"Magenta Logic"; appid:magenta_logic; sid:1000191; rev:1)
alert tcp any any -> any any (msg:"MAILQ"; appid:mailq; sid:1000192; rev:1)
alert tcp any any -> any any (msg:"MANET"; appid:manet; sid:1000193; rev:1)
alert tcp any any -> any any (msg:"MAPI"; appid:mapi; sid:1000194; rev:1)
alert tcp any any -> any any (msg:"Masqudialer"; appid:masqudialer; sid:1000195; rev:1)
alert tcp any any -> any any (msg:"MATIP"; appid:matip; sid:1000196; rev:1)
alert tcp any any -> any any (msg:"McAfee"; appid:mcafee; sid:1000197; rev:1)
alert tcp any any -> any any (msg:"MC-FTP"; appid:mc-ftp; sid:1000198; rev:1)
alert tcp any any -> any any (msg:"McIDAS"; appid:mcidas; sid:1000199; rev:1)
alert tcp any any -> any any (msg:"McIDAS"; appid:mck-ivpip; sid:1000200; rev:1)
alert tcp any any -> any any (msg:"MediaFire"; appid:mediafire; sid:1000201; rev:1)
alert tcp any any -> any any (msg:"Meeting Maker"; appid:meeting_maker; sid:1000202; rev:1)
alert tcp any any -> any any (msg:"Metagram"; appid:metagram; sid:1000203; rev:1)
alert tcp any any -> any any (msg:"MF Cobol"; appid:mf_cobol; sid:1000204; rev:1)
alert tcp any any -> any any (msg:"MFTP"; appid:mftp; sid:1000205; rev:1)
alert tcp any any -> any any (msg:"Mini SQL"; appid:mini_sql; sid:1000206; rev:1)
alert tcp any any -> any any (msg:"Mini SQL"; appid:mit-ml-dev; sid:1000207; rev:1)
alert tcp any any -> any any (msg:"MIT Spooler"; appid:mit_spooler; sid:1000208; rev:1)
alert tcp any any -> any any (msg:"Mixi"; appid:mixi; sid:1000209; rev:1)
alert tcp any any -> any any (msg:"MobileIP"; appid:mobileip; sid:1000210; rev:1)
alert tcp any any -> any any (msg:"MortgageWare"; appid:mortgageware; sid:1000211; rev:1)
alert tcp any any -> any any (msg:"MPM"; appid:mpm; sid:1000212; rev:1)
alert tcp any any -> any any (msg:"MPTN"; appid:mptn; sid:1000213; rev:1)
alert tcp any any -> any any (msg:"MS CRS"; appid:ms_crs; sid:1000214; rev:1)
alert tcp any any -> any any (msg:"MSDN"; appid:msdn; sid:1000215; rev:1)
alert tcp any any -> any any (msg:"MSG"; appid:msg; sid:1000216; rev:1)
alert tcp any any -> any any (msg:"MSMQ"; appid:msmq; sid:1000217; rev:1)
alert tcp any any -> any any (msg:"MSNP"; appid:msnp; sid:1000218; rev:1)
alert tcp any any -> any any (msg:"MSN"; appid:msn; sid:1000219; rev:1)
alert tcp any any -> any any (msg:"MS OLAP"; appid:ms_olap; sid:1000220; rev:1)
alert tcp any any -> any any (msg:"MSP"; appid:msp; sid:1000221; rev:1)
alert tcp any any -> any any (msg:"MySpace"; appid:myspace; sid:1000222; rev:1)
alert tcp any any -> any any (msg:"NAMP"; appid:namp; sid:1000223; rev:1)
alert tcp any any -> any any (msg:"Napster"; appid:napster; sid:1000224; rev:1)
alert tcp any any -> any any (msg:"NCED"; appid:nced; sid:1000225; rev:1)
alert tcp any any -> any any (msg:"NCLD"; appid:ncld; sid:1000226; rev:1)
alert tcp any any -> any any (msg:"NDS Auth"; appid:nds_auth; sid:1000227; rev:1)
alert tcp any any -> any any (msg:"Netinfo"; appid:netinfo; sid:1000228; rev:1)
alert tcp any any -> any any (msg:"NETSC"; appid:netsc; sid:1000229; rev:1)
alert tcp any any -> any any (msg:"NetScout"; appid:netscout; sid:1000230; rev:1)
alert tcp any any -> any any (msg:"Netware"; appid:netware; sid:1000231; rev:1)
alert tcp any any -> any any (msg:"NFA"; appid:nfa; sid:1000232; rev:1)
alert tcp any any -> any any (msg:"NI FTP"; appid:ni_ftp; sid:1000233; rev:1)
alert tcp any any -> any any (msg:"NI Mail"; appid:ni_mail; sid:1000234; rev:1)
alert tcp any any -> any any (msg:"NIP"; appid:nip; sid:1000235; rev:1)
alert tcp any any -> any any (msg:"NNSP"; appid:nnsp; sid:1000236; rev:1)
alert tcp any any -> any any (msg:"NovaBACKUP"; appid:novabackup; sid:1000237; rev:1)
alert tcp any any -> any any (msg:"NPP"; appid:npp; sid:1000238; rev:1)
alert tcp any any -> any any (msg:"NSIIOPS"; appid:nsiiops; sid:1000239; rev:1)
alert tcp any any -> any any (msg:"NSRMP"; appid:nsrmp; sid:1000240; rev:1)
alert tcp any any -> any any (msg:"NSS"; appid:nss; sid:1000241; rev:1)
alert tcp any any -> any any (msg:"NSSTP"; appid:nsstp; sid:1000242; rev:1)
alert tcp any any -> any any (msg:"NXEdit"; appid:nxedit; sid:1000243; rev:1)
alert tcp any any -> any any (msg:"NeXTStep"; appid:nextstep; sid:1000244; rev:1)
alert tcp any any -> any any (msg:"OCBinder"; appid:ocbinder; sid:1000245; rev:1)
alert tcp any any -> any any (msg:"OCServer"; appid:ocserver; sid:1000246; rev:1)
alert tcp any any -> any any (msg:"OCS"; appid:ocs; sid:1000247; rev:1)
alert tcp any any -> any any (msg:"ODMR"; appid:odmr; sid:1000248; rev:1)
alert tcp any any -> any any (msg:"OFTP"; appid:oftp; sid:1000249; rev:1)
alert tcp any any -> any any (msg:"OFTPS"; appid:oftps; sid:1000250; rev:1)
alert tcp any any -> any any (msg:"Onmux"; appid:onmux; sid:1000251; rev:1)
alert tcp any any -> any any (msg:"Opalis Robot"; appid:opalis_robot; sid:1000252; rev:1)
alert tcp any any -> any any (msg:"Openport"; appid:openport; sid:1000253; rev:1)
alert tcp any any -> any any (msg:"OpenVPN"; appid:openvpn; sid:1000254; rev:1)
alert tcp any any -> any any (msg:"Oracle SQLNET"; appid:oracle_sqlnet; sid:1000255; rev:1)
alert tcp any any -> any any (msg:"Orkut"; appid:orkut; sid:1000256; rev:1)
alert tcp any any -> any any (msg:"OSUNMS"; appid:osunms; sid:1000257; rev:1)
alert tcp any any -> any any (msg:"Panda"; appid:panda; sid:1000258; rev:1)
alert tcp any any -> any any (msg:"PartyPoker"; appid:partypoker; sid:1000259; rev:1)
alert tcp any any -> any any (msg:"PAWSERV"; appid:pawserv; sid:1000260; rev:1)
alert tcp any any -> any any (msg:"PCMAIL"; appid:pcmail; sid:1000261; rev:1)
alert tcp any any -> any any (msg:"PDAP"; appid:pdap; sid:1000262; rev:1)
alert tcp any any -> any any (msg:"PFTP"; appid:pftp; sid:1000263; rev:1)
alert tcp any any -> any any (msg:"PIP"; appid:pip; sid:1000264; rev:1)
alert tcp any any -> any any (msg:"PKIX Timestamp"; appid:pkix_timestamp; sid:1000265; rev:1)
alert tcp any any -> any any (msg:"POP2"; appid:pop2; sid:1000266; rev:1)
alert tcp any any -> any any (msg:"PPStream"; appid:ppstream; sid:1000267; rev:1)
alert tcp any any -> any any (msg:"PPStream"; appid:lpr; sid:1000268; rev:1)
alert tcp any any -> any any (msg:"PROFILE"; appid:profile; sid:1000269; rev:1)
alert tcp any any -> any any (msg:"PROSPERO"; appid:prospero; sid:1000270; rev:1)
alert tcp any any -> any any (msg:"PWDGEN"; appid:pwdgen; sid:1000271; rev:1)
alert tcp any any -> any any (msg:"Qbik"; appid:qbik; sid:1000272; rev:1)
alert tcp any any -> any any (msg:"QFT"; appid:qft; sid:1000273; rev:1)
alert tcp any any -> any any (msg:"QMTP"; appid:qmtp; sid:1000274; rev:1)
alert tcp any any -> any any (msg:"QOTD"; appid:qotd; sid:1000275; rev:1)
alert tcp any any -> any any (msg:"QQ"; appid:qq; sid:1000276; rev:1)
alert tcp any any -> any any (msg:"QuickTime"; appid:quicktime; sid:1000277; rev:1)
alert tcp any any -> any any (msg:"RAP"; appid:rap; sid:1000278; rev:1)
alert tcp any any -> any any (msg:"Remote Job Service"; appid:remote_job_service; sid:1000279; rev:1)
alert tcp any any -> any any (msg:"Remote Telnet"; appid:remote_telnet; sid:1000280; rev:1)
alert tcp any any -> any any (msg:"ResCap"; appid:rescap; sid:1000281; rev:1)
alert tcp any any -> any any (msg:"RIP"; appid:rip; sid:1000282; rev:1)
alert tcp any any -> any any (msg:"RIS"; appid:ris; sid:1000283; rev:1)
alert tcp any any -> any any (msg:"RJE"; appid:rje; sid:1000284; rev:1)
alert tcp any any -> any any (msg:"RJE"; appid:rlogin; sid:1000285; rev:1)
alert tcp any any -> any any (msg:"RLP"; appid:rlp; sid:1000286; rev:1)
alert tcp any any -> any any (msg:"RMT"; appid:rmt; sid:1000287; rev:1)
alert tcp any any -> any any (msg:"RPC2PMAP"; appid:rpc2pmap; sid:1000288; rev:1)
alert tcp any any -> any any (msg:"RRP"; appid:rrp; sid:1000289; rev:1)
alert tcp any any -> any any (msg:"RSVD"; appid:rsvd; sid:1000290; rev:1)
alert tcp any any -> any any (msg:"RTSPS"; appid:rtsps; sid:1000291; rev:1)
alert tcp any any -> any any (msg:"SAP HostControl"; appid:sap_hostcontrol; sid:1000292; rev:1)
alert tcp any any -> any any (msg:"Sco I2 Dialog Daemon"; appid:sco_i2_dialog_daemon; sid:1000293; rev:1)
alert tcp any any -> any any (msg:"Second Life"; appid:secondlife; sid:1000294; rev:1)
alert tcp any any -> any any (msg:"SecurSight"; appid:secursight; sid:1000295; rev:1)
alert tcp any any -> any any (msg:"Semantix"; appid:semantix; sid:1000296; rev:1)
alert tcp any any -> any any (msg:"SEND"; appid:send; sid:1000297; rev:1)
alert tcp any any -> any any (msg:"SET"; appid:set; sid:1000298; rev:1)
alert tcp any any -> any any (msg:"SFTP"; appid:sftp; sid:1000299; rev:1)
alert tcp any any -> any any (msg:"SGCP"; appid:sgcp; sid:1000300; rev:1)
alert tcp any any -> any any (msg:"SGMP"; appid:sgmp; sid:1000301; rev:1)
alert tcp any any -> any any (msg:"Sharepoint"; appid:sharepoint; sid:1000302; rev:1)
alert tcp any any -> any any (msg:"Shrinkwrap"; appid:shrinkwrap; sid:1000303; rev:1)
alert tcp any any -> any any (msg:"Silverplatter"; appid:silverplatter; sid:1000304; rev:1)
alert tcp any any -> any any (msg:"SIP"; appid:sip; sid:1000305; rev:1)
alert tcp any any -> any any (msg:"Skype Auth"; appid:skype_auth; sid:1000306; rev:1)
alert tcp any any -> any any (msg:"Slingbox"; appid:slingbox; sid:1000307; rev:1)
alert tcp any any -> any any (msg:"SMAKYNET"; appid:smakynet; sid:1000308; rev:1)
alert tcp any any -> any any (msg:"Smart Session Description Protocol"; appid:smart_session_description_protocol; sid:1000309; rev:1)
alert tcp any any -> any any (msg:"SMPTE"; appid:smpte; sid:1000310; rev:1)
alert tcp any any -> any any (msg:"SMSP"; appid:smsp; sid:1000311; rev:1)
alert tcp any any -> any any (msg:"SMUX"; appid:smux; sid:1000312; rev:1)
alert tcp any any -> any any (msg:"SNA Gateway"; appid:sna_gateway; sid:1000313; rev:1)
alert tcp any any -> any any (msg:"SNET"; appid:snet; sid:1000314; rev:1)
alert tcp any any -> any any (msg:"SNPP"; appid:snpp; sid:1000315; rev:1)
alert tcp any any -> any any (msg:"SoftPC"; appid:softpc; sid:1000316; rev:1)
alert tcp any any -> any any (msg:"SoulSeek"; appid:soulseek; sid:1000317; rev:1)
alert tcp any any -> any any (msg:"SRC"; appid:src; sid:1000318; rev:1)
alert tcp any any -> any any (msg:"SRMP"; appid:srmp; sid:1000319; rev:1)
alert tcp any any -> any any (msg:"Sender Rewriting Scheme"; appid:sender_rewriting_scheme; sid:1000320; rev:1)
alert tcp any any -> any any (msg:"StationLauncher"; appid:stationlauncher; sid:1000321; rev:1)
alert tcp any any -> any any (msg:"Stat Service"; appid:stat_service; sid:1000322; rev:1)
alert tcp any any -> any any (msg:"Su-Mit Telnet"; appid:su-mit_telnet; sid:1000323; rev:1)
alert tcp any any -> any any (msg:"Sun RPC"; appid:sunrpc; sid:1000324; rev:1)
alert tcp any any -> any any (msg:"SUPDUP"; appid:supdup; sid:1000325; rev:1)
alert tcp any any -> any any (msg:"SuperNews"; appid:supernews; sid:1000326; rev:1)
alert tcp any any -> any any (msg:"Sybase SQL"; appid:sybase_sql; sid:1000327; rev:1)
alert tcp any any -> any any (msg:"Symantec System Center"; appid:symantec_system; sid:1000328; rev:1)
alert tcp any any -> any any (msg:"Symantec System Center"; appid:syslog; sid:1000329; rev:1)
alert tcp any any -> any any (msg:"Systat"; appid:systat; sid:1000330; rev:1)
alert tcp any any -> any any (msg:"TACACS+"; appid:tacacs; sid:1000331; rev:1)
alert tcp any any -> any any (msg:"TCPMUX"; appid:tcpmux; sid:1000332; rev:1)
alert tcp any any -> any any (msg:"Texar"; appid:texar; sid:1000333; rev:1)
alert tcp any any -> any any (msg:"Time"; appid:time_protocol; sid:1000334; rev:1)
alert tcp any any -> any any (msg:"Tobit David"; appid:tobit_david; sid:1000335; rev:1)
alert tcp any any -> any any (msg:"TOR"; appid:tor; sid:1000336; rev:1)
alert tcp any any -> any any (msg:"Tripwire"; appid:tripwire; sid:1000337; rev:1)
alert tcp any any -> any any (msg:"Tumblr"; appid:tumblr; sid:1000338; rev:1)
alert tcp any any -> any any (msg:"UAAC"; appid:uaac; sid:1000339; rev:1)
alert tcp any any -> any any (msg:"UARPS"; appid:uarps; sid:1000340; rev:1)
alert tcp any any -> any any (msg:"UC4"; appid:uc4; sid:1000341; rev:1)
alert tcp any any -> any any (msg:"UIS"; appid:uis; sid:1000342; rev:1)
alert tcp any any -> any any (msg:"ListProc"; appid:listproc; sid:1000343; rev:1)
alert tcp any any -> any any (msg:"UMA"; appid:uma; sid:1000344; rev:1)
alert tcp any any -> any any (msg:"Unicenter"; appid:unicenter; sid:1000345; rev:1)
alert tcp any any -> any any (msg:"Unidata LDM"; appid:unidata_ldm; sid:1000346; rev:1)
alert tcp any any -> any any (msg:"Unify"; appid:unify; sid:1000347; rev:1)
alert tcp any any -> any any (msg:"UPS"; appid:ups; sid:1000348; rev:1)
alert tcp any any -> any any (msg:"Usenet"; appid:usenet; sid:1000349; rev:1)
alert tcp any any -> any any (msg:"UUCP"; appid:uucp; sid:1000350; rev:1)
alert tcp any any -> any any (msg:"Vchat"; appid:vchat; sid:1000351; rev:1)
alert tcp any any -> any any (msg:"Vchat"; appid:vettcp; sid:1000352; rev:1)
alert tcp any any -> any any (msg:"VMNET"; appid:vmnet; sid:1000353; rev:1)
alert tcp any any -> any any (msg:"VM PWSCS"; appid:vm_pwscs; sid:1000354; rev:1)
alert tcp any any -> any any (msg:"Vonage"; appid:vonage; sid:1000355; rev:1)
alert tcp any any -> any any (msg:"VSLMP"; appid:vslmp; sid:1000356; rev:1)
alert tcp any any -> any any (msg:"Vuze"; appid:vuze; sid:1000357; rev:1)
alert tcp any any -> any any (msg:"WCCP"; appid:wccp; sid:1000358; rev:1)
alert tcp any any -> any any (msg:"Webfilter"; appid:webfilter; sid:1000359; rev:1)
alert tcp any any -> any any (msg:"WebLogic"; appid:weblogic; sid:1000360; rev:1)
alert tcp any any -> any any (msg:"Wikipedia"; appid:wikipedia; sid:1000361; rev:1)
alert tcp any any -> any any (msg:"Windows Live"; appid:windows_live; sid:1000362; rev:1)
alert tcp any any -> any any (msg:"Windows Media"; appid:windows_media; sid:1000363; rev:1)
alert tcp any any -> any any (msg:"WINS"; appid:nameserver; sid:1000364; rev:1)
alert tcp any any -> any any (msg:"Wordpress"; appid:wordpress; sid:1000365; rev:1)
alert tcp any any -> any any (msg:"World of Warcraft"; appid:wowcraft; sid:1000366; rev:1)
alert tcp any any -> any any (msg:"Xanga"; appid:xanga; sid:1000367; rev:1)
alert tcp any any -> any any (msg:"Xbone"; appid:xbone; sid:1000368; rev:1)
alert tcp any any -> any any (msg:"XDMCP"; appid:xdmcp; sid:1000369; rev:1)
alert tcp any any -> any any (msg:"Xfer"; appid:xfer; sid:1000370; rev:1)
alert tcp any any -> any any (msg:"XNS Authentication"; appid:xns_authentication; sid:1000371; rev:1)
alert tcp any any -> any any (msg:"XNS Clearinghouse"; appid:xns_clearinghouse; sid:1000372; rev:1)
alert tcp any any -> any any (msg:"XNS Mail"; appid:xns_mail; sid:1000373; rev:1)
alert tcp any any -> any any (msg:"XNS Time"; appid:xns_time; sid:1000374; rev:1)
alert tcp any any -> any any (msg:"XNS"; appid:xns; sid:1000375; rev:1)
alert tcp any any -> any any (msg:"Xyplex"; appid:xyplex; sid:1000376; rev:1)
alert tcp any any -> any any (msg:"Yahoo! Games"; appid:yahoo_games; sid:1000377; rev:1)
alert tcp any any -> any any (msg:"Yahoo!"; appid:yahoo; sid:1000378; rev:1)
alert tcp any any -> any any (msg:"ANSI Z39.50"; appid:ansi_z39.50; sid:1000379; rev:1)
alert tcp any any -> any any (msg:"Zannet"; appid:zannet; sid:1000380; rev:1)
alert tcp any any -> any any (msg:"Zebra"; appid:zebra; sid:1000381; rev:1)
alert tcp any any -> any any (msg:"Zoho"; appid:zoho; sid:1000382; rev:1)
alert tcp any any -> any any (msg:"Zoho Chat"; appid:zoho_chat; sid:1000383; rev:1)
alert tcp any any -> any any (msg:"Zoho Mail"; appid:zoho_mail; sid:1000384; rev:1)
alert tcp any any -> any any (msg:"Zoho Wiki"; appid:zoho_wiki; sid:1000385; rev:1)
alert tcp any any -> any any (msg:"Zynga"; appid:zynga; sid:1000386; rev:1)
alert tcp any any -> any any (msg:"1-800-Flowers"; appid:1-800-flowers; sid:1000387; rev:1)
alert tcp any any -> any any (msg:"100Bao"; appid:100bao; sid:1000388; rev:1)
alert tcp any any -> any any (msg:"100Bao"; appid:2channel; sid:1000389; rev:1)
alert tcp any any -> any any (msg:"100Bao"; appid:6.pm; sid:1000390; rev:1)
alert tcp any any -> any any (msg:"Ace Hardware Corporation"; appid:ace_hardware; sid:1000391; rev:1)
alert tcp any any -> any any (msg:"Addicting Games"; appid:addicting_games; sid:1000392; rev:1)
alert tcp any any -> any any (msg:"Adobe Software"; appid:adobe_software; sid:1000393; rev:1)
alert tcp any any -> any any (msg:"Adorama"; appid:adorama; sid:1000394; rev:1)
alert tcp any any -> any any (msg:"American Express"; appid:amex; sid:1000395; rev:1)
alert tcp any any -> any any (msg:"Android browser"; appid:android_browser; sid:1000396; rev:1)
alert tcp any any -> any any (msg:"AOL Mail"; appid:aol_mail; sid:1000397; rev:1)
alert tcp any any -> any any (msg:"Apple Mail"; appid:apple_mail; sid:1000398; rev:1)
alert tcp any any -> any any (msg:"Apple Store"; appid:apple_store; sid:1000399; rev:1)
alert tcp any any -> any any (msg:"ARCServe"; appid:arcserve; sid:1000400; rev:1)
alert tcp any any -> any any (msg:"Ares"; appid:ares; sid:1000401; rev:1)
alert tcp any any -> any any (msg:"Argos"; appid:argos; sid:1000402; rev:1)
alert tcp any any -> any any (msg:"CC Studios"; appid:cc_studios; sid:1000403; rev:1)
alert tcp any any -> any any (msg:"Autoblog"; appid:autoblog; sid:1000404; rev:1)
alert tcp any any -> any any (msg:"AutoTrader.com"; appid:autotrader.com; sid:1000405; rev:1)
alert tcp any any -> any any (msg:"B&H Photo Video"; appid:bh_photo_video; sid:1000406; rev:1)
alert tcp any any -> any any (msg:"Bank of America"; appid:bank_of_america; sid:1000407; rev:1)
alert tcp any any -> any any (msg:"Barnes and Noble"; appid:barnes_n_noble; sid:1000408; rev:1)
alert tcp any any -> any any (msg:"Barneys New York"; appid:barneys_ny; sid:1000409; rev:1)
alert tcp any any -> any any (msg:"Basecamp"; appid:basecamp; sid:1000410; rev:1)
alert tcp any any -> any any (msg:"Battle.net"; appid:battle_net; sid:1000411; rev:1)
alert tcp any any -> any any (msg:"Best Buy"; appid:best_buy; sid:1000412; rev:1)
alert tcp any any -> any any (msg:"BGP"; appid:bgp; sid:1000413; rev:1)
alert tcp any any -> any any (msg:"BitTorrent tracker"; appid:torrent_tracker; sid:1000414; rev:1)
alert tcp any any -> any any (msg:"Black & Decker Corporation"; appid:black_decker; sid:1000415; rev:1)
alert tcp any any -> any any (msg:"Blackberry browser"; appid:blackberry_browser; sid:1000416; rev:1)
alert tcp any any -> any any (msg:"Blip.tv"; appid:blip.tv; sid:1000417; rev:1)
alert tcp any any -> any any (msg:"Blockbuster"; appid:blockbuster; sid:1000418; rev:1)
alert tcp any any -> any any (msg:"Blogger"; appid:blogger; sid:1000419; rev:1)
alert tcp any any -> any any (msg:"Bloomingdales"; appid:bloomingdales; sid:1000420; rev:1)
alert tcp any any -> any any (msg:"Blue Nile"; appid:blue_nile; sid:1000421; rev:1)
alert tcp any any -> any any (msg:"Bluefly"; appid:bluefly; sid:1000422; rev:1)
alert tcp any any -> any any (msg:"CamerasDirect.com.au"; appid:camerasdirect; sid:1000423; rev:1)
alert tcp any any -> any any (msg:"Capital One"; appid:capital_one; sid:1000424; rev:1)
alert tcp any any -> any any (msg:"Car and Driver"; appid:car_and_driver; sid:1000425; rev:1)
alert tcp any any -> any any (msg:"CarMax"; appid:carmax; sid:1000426; rev:1)
alert tcp any any -> any any (msg:"CDiscount"; appid:cdiscount; sid:1000427; rev:1)
alert tcp any any -> any any (msg:"Character Generator"; appid:chargen; sid:1000428; rev:1)
alert tcp any any -> any any (msg:"Chase"; appid:chase; sid:1000429; rev:1)
alert tcp any any -> any any (msg:"CheapTickets"; appid:cheaptickets; sid:1000430; rev:1)
alert tcp any any -> any any (msg:"Chrome"; appid:chrome; sid:1000431; rev:1)
alert tcp any any -> any any (msg:"Citi"; appid:citi; sid:1000432; rev:1)
alert tcp any any -> any any (msg:"City Sports"; appid:city_sports; sid:1000433; rev:1)
alert tcp any any -> any any (msg:"Collabedit"; appid:collabedit; sid:1000434; rev:1)
alert tcp any any -> any any (msg:"Costco"; appid:costco; sid:1000435; rev:1)
alert tcp any any -> any any (msg:"Craigslist"; appid:craigslist; sid:1000436; rev:1)
alert tcp any any -> any any (msg:"Crutchfield"; appid:crutchfield; sid:1000437; rev:1)
alert tcp any any -> any any (msg:"cURL"; appid:curl; sid:1000438; rev:1)
alert tcp any any -> any any (msg:"CVS"; appid:cvs; sid:1000439; rev:1)
alert tcp any any -> any any (msg:"DAAP"; appid:daap; sid:1000440; rev:1)
alert tcp any any -> any any (msg:"Dailymotion"; appid:dailymotion; sid:1000441; rev:1)
alert tcp any any -> any any (msg:"David Jones"; appid:david_jones; sid:1000442; rev:1)
alert tcp any any -> any any (msg:"DB2"; appid:db2; sid:1000443; rev:1)
alert tcp any any -> any any (msg:"DCE/RPC"; appid:dcerpc; sid:1000444; rev:1)
alert tcp any any -> any any (msg:"Deals Direct"; appid:deals_direct; sid:1000445; rev:1)
alert tcp any any -> any any (msg:"Delicious"; appid:delicious; sid:1000446; rev:1)
alert tcp any any -> any any (msg:"Dell"; appid:dell; sid:1000447; rev:1)
alert tcp any any -> any any (msg:"Destructoid"; appid:destructoid; sid:1000448; rev:1)
alert tcp any any -> any any (msg:"deviantART"; appid:deviantart; sid:1000449; rev:1)
alert tcp any any -> any any (msg:"DHCP"; appid:dhcp; sid:1000450; rev:1)
alert tcp any any -> any any (msg:"Dick's Sporting Goods"; appid:dicks_sporting; sid:1000451; rev:1)
alert tcp any any -> any any (msg:"Diigo"; appid:diigo; sid:1000452; rev:1)
alert tcp any any -> any any (msg:"Dillards"; appid:dillards; sid:1000453; rev:1)
alert tcp any any -> any any (msg:"Discard"; appid:discard; sid:1000454; rev:1)
alert tcp any any -> any any (msg:"Discover"; appid:discover; sid:1000455; rev:1)
alert tcp any any -> any any (msg:"DNP3"; appid:dnp3; sid:1000456; rev:1)
alert tcp any any -> any any (msg:"DNS"; appid:dns; sid:1000457; rev:1)
alert tcp any any -> any any (msg:"DRDA"; appid:drda; sid:1000458; rev:1)
alert tcp any any -> any any (msg:"Dropbear"; appid:dropbear; sid:1000459; rev:1)
alert tcp any any -> any any (msg:"E*TRADE"; appid:etrade; sid:1000460; rev:1)
alert tcp any any -> any any (msg:"Edmunds.com"; appid:edmunds; sid:1000461; rev:1)
alert tcp any any -> any any (msg:"eDonkey"; appid:edonkey; sid:1000462; rev:1)
alert tcp any any -> any any (msg:"Eudora"; appid:eudora; sid:1000463; rev:1)
alert tcp any any -> any any (msg:"Eudora Pro"; appid:eudora_pro; sid:1000464; rev:1)
alert tcp any any -> any any (msg:"Evolution"; appid:evolution; sid:1000465; rev:1)
alert tcp any any -> any any (msg:"Evolution"; appid:exec; sid:1000466; rev:1)
alert tcp any any -> any any (msg:"Expedia"; appid:expedia; sid:1000467; rev:1)
alert tcp any any -> any any (msg:"Facebook"; appid:facebook; sid:1000468; rev:1)
alert tcp any any -> any any (msg:"Facebook Comment"; appid:fb_comment; sid:1000469; rev:1)
alert tcp any any -> any any (msg:"Premier Football"; appid:premier_football; sid:1000470; rev:1)
alert tcp any any -> any any (msg:"Fidelity"; appid:fidelity; sid:1000471; rev:1)
alert tcp any any -> any any (msg:"Finger"; appid:finger; sid:1000472; rev:1)
alert tcp any any -> any any (msg:"Firefox"; appid:firefox; sid:1000473; rev:1)
alert tcp any any -> any any (msg:"Flash Video"; appid:flash_video; sid:1000474; rev:1)
alert tcp any any -> any any (msg:"Fnac"; appid:fnac; sid:1000475; rev:1)
alert tcp any any -> any any (msg:"Friendster"; appid:friendster; sid:1000476; rev:1)
alert tcp any any -> any any (msg:"FTD"; appid:ftd; sid:1000477; rev:1)
alert tcp any any -> any any (msg:"G4"; appid:g4; sid:1000478; rev:1)
alert tcp any any -> any any (msg:"Game Informer"; appid:game_informer; sid:1000479; rev:1)
alert tcp any any -> any any (msg:"GameSpot"; appid:gamespot; sid:1000480; rev:1)
alert tcp any any -> any any (msg:"GameSpy"; appid:gamespy; sid:1000481; rev:1)
alert tcp any any -> any any (msg:"GameStop"; appid:gamestop; sid:1000482; rev:1)
alert tcp any any -> any any (msg:"GameTrailers"; appid:gametrailers; sid:1000483; rev:1)
alert tcp any any -> any any (msg:"Gawker"; appid:gawker; sid:1000484; rev:1)
alert tcp any any -> any any (msg:"Gmail"; appid:gmail; sid:1000485; rev:1)
alert tcp any any -> any any (msg:"GnucleusLAN"; appid:gnucleuslan; sid:1000486; rev:1)
alert tcp any any -> any any (msg:"Gnutella"; appid:gnutella; sid:1000487; rev:1)
alert tcp any any -> any any (msg:"Gnutella2"; appid:gnutella2; sid:1000488; rev:1)
alert tcp any any -> any any (msg:"Google Analytics"; appid:google_analytics; sid:1000489; rev:1)
alert tcp any any -> any any (msg:"Google Calendar"; appid:google_calendar; sid:1000490; rev:1)
alert tcp any any -> any any (msg:"Google News"; appid:google_news; sid:1000491; rev:1)
alert tcp any any -> any any (msg:"Google Product Search"; appid:google_product_search; sid:1000492; rev:1)
alert tcp any any -> any any (msg:"Google Safebrowsing"; appid:google_safebrowsing; sid:1000493; rev:1)
alert tcp any any -> any any (msg:"Gopher"; appid:gopher; sid:1000494; rev:1)
alert tcp any any -> any any (msg:"Haiku Learning Systems"; appid:haiku_learning; sid:1000495; rev:1)
alert tcp any any -> any any (msg:"Home Depot"; appid:home_depot; sid:1000496; rev:1)
alert tcp any any -> any any (msg:"Hostname server"; appid:hostname; sid:1000497; rev:1)
alert tcp any any -> any any (msg:"Google Earth"; appid:google_earth; sid:1000498; rev:1)
alert tcp any any -> any any (msg:"Hotline"; appid:hotline; sid:1000499; rev:1)
alert tcp any any -> any any (msg:"House of Fraser"; appid:house_of_fraser; sid:1000500; rev:1)
alert tcp any any -> any any (msg:"HSBC"; appid:hsbc; sid:1000501; rev:1)
alert tcp any any -> any any (msg:"HTTP"; appid:http; sid:1000502; rev:1)
alert tcp any any -> any any (msg:"Hulu"; appid:hulu; sid:1000503; rev:1)
alert tcp any any -> any any (msg:"IBM App"; appid:ibm_app; sid:1000504; rev:1)
alert tcp any any -> any any (msg:"ICQ"; appid:icq; sid:1000505; rev:1)
alert tcp any any -> any any (msg:"IGN"; appid:ign; sid:1000506; rev:1)
alert tcp any any -> any any (msg:"ImageShack"; appid:imageshack; sid:1000507; rev:1)
alert tcp any any -> any any (msg:"IMAP"; appid:imap; sid:1000508; rev:1)
alert tcp any any -> any any (msg:"Imgur"; appid:imgur; sid:1000509; rev:1)
alert tcp any any -> any any (msg:"Imgur"; appid:imo.im; sid:1000510; rev:1)
alert tcp any any -> any any (msg:"Internet Explorer"; appid:internet_explorer; sid:1000511; rev:1)
alert tcp any any -> any any (msg:"IRC"; appid:ircd; sid:1000512; rev:1)
alert tcp any any -> any any (msg:"ITU H.323"; appid:itu_h.323; sid:1000513; rev:1)
alert tcp any any -> any any (msg:"iTunes"; appid:itunes; sid:1000514; rev:1)
alert tcp any any -> any any (msg:"J.C. Penney"; appid:jcpenny; sid:1000515; rev:1)
alert tcp any any -> any any (msg:"Jabber"; appid:jabber; sid:1000516; rev:1)
alert tcp any any -> any any (msg:"Jalopnik"; appid:jalopnik; sid:1000517; rev:1)
alert tcp any any -> any any (msg:"Java RMI"; appid:java_rmi; sid:1000518; rev:1)
alert tcp any any -> any any (msg:"Jira"; appid:jira; sid:1000519; rev:1)
alert tcp any any -> any any (msg:"Joystiq"; appid:joystiq; sid:1000520; rev:1)
alert tcp any any -> any any (msg:"KAD"; appid:kad; sid:1000521; rev:1)
alert tcp any any -> any any (msg:"Kay Jewelers"; appid:kay_jewelers; sid:1000522; rev:1)
alert tcp any any -> any any (msg:"KMail"; appid:kmail; sid:1000523; rev:1)
alert tcp any any -> any any (msg:"Kerberos"; appid:kerberos; sid:1000524; rev:1)
alert tcp any any -> any any (msg:"Kmart"; appid:kmart; sid:1000525; rev:1)
alert tcp any any -> any any (msg:"Kogan Technologies"; appid:kogan_tech; sid:1000526; rev:1)
alert tcp any any -> any any (msg:"Kohl's"; appid:kohl's; sid:1000527; rev:1)
alert tcp any any -> any any (msg:"Kongregate"; appid:kongregate; sid:1000528; rev:1)
alert tcp any any -> any any (msg:"Konqueror"; appid:konqueror; sid:1000529; rev:1)
alert tcp any any -> any any (msg:"Kotaku"; appid:kotaku; sid:1000530; rev:1)
alert tcp any any -> any any (msg:"Launchpad"; appid:launchpad; sid:1000531; rev:1)
alert tcp any any -> any any (msg:"LDAP"; appid:ldap; sid:1000532; rev:1)
alert tcp any any -> any any (msg:"Limelight"; appid:limelight; sid:1000533; rev:1)
alert tcp any any -> any any (msg:"LinkedIn"; appid:linkedin; sid:1000534; rev:1)
alert tcp any any -> any any (msg:"LinkedIn Job Search"; appid:linkedin_jobs; sid:1000535; rev:1)
alert tcp any any -> any any (msg:"Linuxconf"; appid:linuxconf; sid:1000536; rev:1)
alert tcp any any -> any any (msg:"LiveJournal"; appid:livejournal; sid:1000537; rev:1)
alert tcp any any -> any any (msg:"Lokalisten"; appid:lokalisten; sid:1000538; rev:1)
alert tcp any any -> any any (msg:"Lord & Taylor"; appid:lord_taylor; sid:1000539; rev:1)
alert tcp any any -> any any (msg:"Lotus Notes"; appid:lotus_notes; sid:1000540; rev:1)
alert tcp any any -> any any (msg:"Lowe's"; appid:lowes; sid:1000541; rev:1)
alert tcp any any -> any any (msg:"Lowe's"; appid:lsh; sid:1000542; rev:1)
alert tcp any any -> any any (msg:"Manolito"; appid:manolito; sid:1000543; rev:1)
alert tcp any any -> any any (msg:"Megaco"; appid:megaco; sid:1000544; rev:1)
alert tcp any any -> any any (msg:"Menards"; appid:menards; sid:1000545; rev:1)
alert tcp any any -> any any (msg:"Metacafe"; appid:metacafe; sid:1000546; rev:1)
alert tcp any any -> any any (msg:"MetaFilter"; appid:metafilter; sid:1000547; rev:1)
alert tcp any any -> any any (msg:"MGCP"; appid:mgcp; sid:1000548; rev:1)
alert tcp any any -> any any (msg:"Microsoft Update"; appid:ms_update; sid:1000549; rev:1)
alert tcp any any -> any any (msg:"Microsoft Windows Messenger"; appid:ms_windows_msgr; sid:1000550; rev:1)
alert tcp any any -> any any (msg:"MMS"; appid:mms; sid:1000551; rev:1)
alert tcp any any -> any any (msg:"Mobile Safari"; appid:mobile_safari; sid:1000552; rev:1)
alert tcp any any -> any any (msg:"Modbus"; appid:modbus; sid:1000553; rev:1)
alert tcp any any -> any any (msg:"Morgan Stanley"; appid:morgan_stanley; sid:1000554; rev:1)
alert tcp any any -> any any (msg:"MSN Messenger"; appid:msn_messenger; sid:1000555; rev:1)
alert tcp any any -> any any (msg:"Mute"; appid:mute; sid:1000556; rev:1)
alert tcp any any -> any any (msg:"Mutt"; appid:mutt; sid:1000557; rev:1)
alert tcp any any -> any any (msg:"MySQL"; appid:mysql; sid:1000558; rev:1)
alert tcp any any -> any any (msg:"myUdutu"; appid:myudutu; sid:1000559; rev:1)
alert tcp any any -> any any (msg:"NCP"; appid:ncp; sid:1000560; rev:1)
alert tcp any any -> any any (msg:"Neckermann"; appid:neckermann; sid:1000561; rev:1)
alert tcp any any -> any any (msg:"Neiman Marcus"; appid:neiman_marcus; sid:1000562; rev:1)
alert tcp any any -> any any (msg:"Nessus"; appid:nessus; sid:1000563; rev:1)
alert tcp any any -> any any (msg:"NetBIOS-dgm"; appid:netbios-dgm; sid:1000564; rev:1)
alert tcp any any -> any any (msg:"NetBIOS-ns"; appid:netbios-ns; sid:1000565; rev:1)
alert tcp any any -> any any (msg:"NetBIOS-ssn (SMB)"; appid:netbios-ssn; sid:1000566; rev:1)
alert tcp any any -> any any (msg:"Netflix"; appid:netflix; sid:1000567; rev:1)
alert tcp any any -> any any (msg:"Netlog"; appid:netlog; sid:1000568; rev:1)
alert tcp any any -> any any (msg:"Netvibes"; appid:netvibes; sid:1000569; rev:1)
alert tcp any any -> any any (msg:"Newegg"; appid:newegg; sid:1000570; rev:1)
alert tcp any any -> any any (msg:"NewsNow"; appid:newsnow; sid:1000571; rev:1)
alert tcp any any -> any any (msg:"Newsvine"; appid:newsvine; sid:1000572; rev:1)
alert tcp any any -> any any (msg:"Nico Nico Douga"; appid:nico_douga; sid:1000573; rev:1)
alert tcp any any -> any any (msg:"NNTP"; appid:nntp; sid:1000574; rev:1)
alert tcp any any -> any any (msg:"Nordstrom"; appid:nordstrom; sid:1000575; rev:1)
alert tcp any any -> any any (msg:"NSPlayer"; appid:nsplayer; sid:1000576; rev:1)
alert tcp any any -> any any (msg:"NSPlayer"; appid:ntalk; sid:1000577; rev:1)
alert tcp any any -> any any (msg:"NTP"; appid:ntp; sid:1000578; rev:1)
alert tcp any any -> any any (msg:"Office Depot"; appid:office_depot; sid:1000579; rev:1)
alert tcp any any -> any any (msg:"OfficeMax"; appid:officemax; sid:1000580; rev:1)
alert tcp any any -> any any (msg:"OfficeMax"; appid:oo.com.au; sid:1000581; rev:1)
alert tcp any any -> any any (msg:"OpenSSH"; appid:openssh; sid:1000582; rev:1)
alert tcp any any -> any any (msg:"Oracle Database"; appid:oracle_database; sid:1000583; rev:1)
alert tcp any any -> any any (msg:"TNS/Oracle"; appid:oracle; sid:1000584; rev:1)
alert tcp any any -> any any (msg:"Orbitz"; appid:orbitz; sid:1000585; rev:1)
alert tcp any any -> any any (msg:"Outlook"; appid:outlook; sid:1000586; rev:1)
alert tcp any any -> any any (msg:"Outlook Express"; appid:outlook_express; sid:1000587; rev:1)
alert tcp any any -> any any (msg:"Overstock.com"; appid:overstock; sid:1000588; rev:1)
alert tcp any any -> any any (msg:"Pandora"; appid:pandora; sid:1000589; rev:1)
alert tcp any any -> any any (msg:"PC-Duo"; appid:pc_duo; sid:1000590; rev:1)
alert tcp any any -> any any (msg:"PcAnywhere"; appid:pcanywhere; sid:1000591; rev:1)
alert tcp any any -> any any (msg:"PeerCast"; appid:peercast; sid:1000592; rev:1)
alert tcp any any -> any any (msg:"PeerEnabler"; appid:peerenabler; sid:1000593; rev:1)
alert tcp any any -> any any (msg:"Photobucket"; appid:photobucket; sid:1000594; rev:1)
alert tcp any any -> any any (msg:"Poco"; appid:poco; sid:1000595; rev:1)
alert tcp any any -> any any (msg:"Pogo"; appid:pogo; sid:1000596; rev:1)
alert tcp any any -> any any (msg:"POP3"; appid:pop3; sid:1000597; rev:1)
alert tcp any any -> any any (msg:"PopCap Games"; appid:popcap_games; sid:1000598; rev:1)
alert tcp any any -> any any (msg:"PopUrls"; appid:popurls; sid:1000599; rev:1)
alert tcp any any -> any any (msg:"PostgreSQL"; appid:postgresql; sid:1000600; rev:1)
alert tcp any any -> any any (msg:"Priceline.com"; appid:priceline; sid:1000601; rev:1)
alert tcp any any -> any any (msg:"ProFlowers"; appid:proflowers; sid:1000602; rev:1)
alert tcp any any -> any any (msg:"PuTTY"; appid:putty; sid:1000603; rev:1)
alert tcp any any -> any any (msg:"Quake"; appid:quake; sid:1000604; rev:1)
alert tcp any any -> any any (msg:"Quill Corporation"; appid:quill_corp; sid:1000605; rev:1)
alert tcp any any -> any any (msg:"QVC"; appid:qvc; sid:1000606; rev:1)
alert tcp any any -> any any (msg:"Qzone"; appid:qzone; sid:1000607; rev:1)
alert tcp any any -> any any (msg:"RADIUS"; appid:radius; sid:1000608; rev:1)
alert tcp any any -> any any (msg:"RADIUS-acct"; appid:radacct; sid:1000609; rev:1)
alert tcp any any -> any any (msg:"RDP"; appid:rdp; sid:1000610; rev:1)
alert tcp any any -> any any (msg:"Reddit"; appid:reddit; sid:1000611; rev:1)
alert tcp any any -> any any (msg:"Redmine"; appid:redmine; sid:1000612; rev:1)
alert tcp any any -> any any (msg:"REI"; appid:rei; sid:1000613; rev:1)
alert tcp any any -> any any (msg:"Renren"; appid:renren; sid:1000614; rev:1)
alert tcp any any -> any any (msg:"REVOLVEclothing"; appid:revolveclothing; sid:1000615; rev:1)
alert tcp any any -> any any (msg:"Rona"; appid:rona; sid:1000616; rev:1)
alert tcp any any -> any any (msg:"RTMP"; appid:rtmp; sid:1000617; rev:1)
alert tcp any any -> any any (msg:"RTP"; appid:rtp; sid:1000618; rev:1)
alert tcp any any -> any any (msg:"RTSP"; appid:rtsp; sid:1000619; rev:1)
alert tcp any any -> any any (msg:"Safari"; appid:safari; sid:1000620; rev:1)
alert tcp any any -> any any (msg:"Saks Fifth Avenue"; appid:saks_fifth_ave; sid:1000621; rev:1)
alert tcp any any -> any any (msg:"Sam's Club"; appid:sams_club; sid:1000622; rev:1)
alert tcp any any -> any any (msg:"schuelerVZ"; appid:schuelervz; sid:1000623; rev:1)
alert tcp any any -> any any (msg:"Schwab"; appid:schwab; sid:1000624; rev:1)
alert tcp any any -> any any (msg:"Sears"; appid:sears; sid:1000625; rev:1)
alert tcp any any -> any any (msg:"Sears"; appid:shell; sid:1000626; rev:1)
alert tcp any any -> any any (msg:"Shockwave"; appid:shockwave; sid:1000627; rev:1)
alert tcp any any -> any any (msg:"Shoplet"; appid:shoplet; sid:1000628; rev:1)
alert tcp any any -> any any (msg:"ShopNBC"; appid:shopnbc; sid:1000629; rev:1)
alert tcp any any -> any any (msg:"HP Home & Home Office Store"; appid:hp_store; sid:1000630; rev:1)
alert tcp any any -> any any (msg:"ShopStyle"; appid:shopstyle; sid:1000631; rev:1)
alert tcp any any -> any any (msg:"SHOUTCast Radio"; appid:shoutcast_radio; sid:1000632; rev:1)
alert tcp any any -> any any (msg:"ShowClix"; appid:showclix; sid:1000633; rev:1)
alert tcp any any -> any any (msg:"ShowDocument"; appid:showdocument; sid:1000634; rev:1)
alert tcp any any -> any any (msg:"Skype"; appid:skype; sid:1000635; rev:1)
alert tcp any any -> any any (msg:"Slashdot"; appid:slashdot; sid:1000636; rev:1)
alert tcp any any -> any any (msg:"SMTP"; appid:smtp; sid:1000637; rev:1)
alert tcp any any -> any any (msg:"SNMP"; appid:snmp; sid:1000638; rev:1)
alert tcp any any -> any any (msg:"SOCKS"; appid:socks; sid:1000639; rev:1)
alert tcp any any -> any any (msg:"Soribada"; appid:soribada; sid:1000640; rev:1)
alert tcp any any -> any any (msg:"Soribada"; appid:spin.de; sid:1000641; rev:1)
alert tcp any any -> any any (msg:"Sports Authority"; appid:sports_auth; sid:1000642; rev:1)
alert tcp any any -> any any (msg:"SQL Server"; appid:sql_server; sid:1000643; rev:1)
alert tcp any any -> any any (msg:"Squid"; appid:squid; sid:1000644; rev:1)
alert tcp any any -> any any (msg:"SSH"; appid:ssh; sid:1000645; rev:1)
alert tcp any any -> any any (msg:"SSL"; appid:ssl; sid:1000646; rev:1)
alert tcp any any -> any any (msg:"Staples"; appid:staples; sid:1000647; rev:1)
alert tcp any any -> any any (msg:"StayFriends"; appid:stayfriends; sid:1000648; rev:1)
alert tcp any any -> any any (msg:"StubHub"; appid:stubhub; sid:1000649; rev:1)
alert tcp any any -> any any (msg:"studiVZ"; appid:studivz; sid:1000650; rev:1)
alert tcp any any -> any any (msg:"StumbleUpon"; appid:stumbleupon; sid:1000651; rev:1)
alert tcp any any -> any any (msg:"STUN"; appid:stun; sid:1000652; rev:1)
alert tcp any any -> any any (msg:"Swarovski"; appid:swarovski; sid:1000653; rev:1)
alert tcp any any -> any any (msg:"T. Rowe Price"; appid:troweprice; sid:1000654; rev:1)
alert tcp any any -> any any (msg:"TDS"; appid:tds; sid:1000655; rev:1)
alert tcp any any -> any any (msg:"TDS"; appid:talk; sid:1000656; rev:1)
alert tcp any any -> any any (msg:"Target"; appid:target; sid:1000657; rev:1)
alert tcp any any -> any any (msg:"Tchibo"; appid:tchibo; sid:1000658; rev:1)
alert tcp any any -> any any (msg:"TD Ameritrade"; appid:td_ameritrade; sid:1000659; rev:1)
alert tcp any any -> any any (msg:"Telnet"; appid:telnet; sid:1000660; rev:1)
alert tcp any any -> any any (msg:"TFTP"; appid:tftp; sid:1000661; rev:1)
alert tcp any any -> any any (msg:"The Gap"; appid:gapstores; sid:1000662; rev:1)
alert tcp any any -> any any (msg:"The Sharper Image"; appid:sharper_image; sid:1000663; rev:1)
alert tcp any any -> any any (msg:"Thunderbird"; appid:thunderbird; sid:1000664; rev:1)
alert tcp any any -> any any (msg:"Ticketmaster"; appid:ticketmaster; sid:1000665; rev:1)
alert tcp any any -> any any (msg:"Tickets.com"; appid:tickets; sid:1000666; rev:1)
alert tcp any any -> any any (msg:"Tiffany & Co."; appid:tiffany; sid:1000667; rev:1)
alert tcp any any -> any any (msg:"Tiger Direct"; appid:tiger_direct; sid:1000668; rev:1)
alert tcp any any -> any any (msg:"Timbuktu"; appid:timbuktu; sid:1000669; rev:1)
alert tcp any any -> any any (msg:"TinyPic"; appid:tinypic; sid:1000670; rev:1)
alert tcp any any -> any any (msg:"Tivoli"; appid:tivoli; sid:1000671; rev:1)
alert tcp any any -> any any (msg:"TOC"; appid:toc; sid:1000672; rev:1)
alert tcp any any -> any any (msg:"Top Gear"; appid:top_gear; sid:1000673; rev:1)
alert tcp any any -> any any (msg:"Trac"; appid:trac; sid:1000674; rev:1)
alert tcp any any -> any any (msg:"Travelocity"; appid:travelocity; sid:1000675; rev:1)
alert tcp any any -> any any (msg:"TripAdvisor"; appid:tripadvisor; sid:1000676; rev:1)
alert tcp any any -> any any (msg:"Twitter"; appid:twitter; sid:1000677; rev:1)
alert tcp any any -> any any (msg:"Urban Outfitters"; appid:urban_outfitters; sid:1000678; rev:1)
alert tcp any any -> any any (msg:"Ustream.tv"; appid:ustream.tv; sid:1000679; rev:1)
alert tcp any any -> any any (msg:"Vanguard"; appid:vanguard; sid:1000680; rev:1)
alert tcp any any -> any any (msg:"vCOM"; appid:vcom; sid:1000681; rev:1)
alert tcp any any -> any any (msg:"vCOM"; appid:vente-privee.com; sid:1000682; rev:1)
alert tcp any any -> any any (msg:"Veoh"; appid:veoh; sid:1000683; rev:1)
alert tcp any any -> any any (msg:"Verizon Email"; appid:verizon_email; sid:1000684; rev:1)
alert tcp any any -> any any (msg:"Viadeo"; appid:viadeo; sid:1000685; rev:1)
alert tcp any any -> any any (msg:"Victoria's Secret"; appid:victoria_secret; sid:1000686; rev:1)
alert tcp any any -> any any (msg:"Vimeo"; appid:vimeo; sid:1000687; rev:1)
alert tcp any any -> any any (msg:"VNC"; appid:vnc; sid:1000688; rev:1)
alert tcp any any -> any any (msg:"RFB"; appid:vnc-server; sid:1000689; rev:1)
alert tcp any any -> any any (msg:"Docstor"; appid:docstor; sid:1000690; rev:1)
alert tcp any any -> any any (msg:"Voyages-sncf.com"; appid:voyages-sncf; sid:1000691; rev:1)
alert tcp any any -> any any (msg:"Walmart"; appid:walmart; sid:1000692; rev:1)
alert tcp any any -> any any (msg:"Web Of Trust"; appid:web_of_trust; sid:1000693; rev:1)
alert tcp any any -> any any (msg:"WebEx"; appid:webex; sid:1000694; rev:1)
alert tcp any any -> any any (msg:"WebSphere MQ"; appid:websphere_mq; sid:1000695; rev:1)
alert tcp any any -> any any (msg:"Wells Fargo"; appid:wells_fargo; sid:1000696; rev:1)
alert tcp any any -> any any (msg:"Wells Fargo"; appid:wer-kennt-wen; sid:1000697; rev:1)
alert tcp any any -> any any (msg:"Wget"; appid:wget; sid:1000698; rev:1)
alert tcp any any -> any any (msg:"Zynga Poker"; appid:zynga_poker; sid:1000699; rev:1)
alert tcp any any -> any any (msg:"Windows Live SkyDrive"; appid:skydrive; sid:1000700; rev:1)
alert tcp any any -> any any (msg:"Windows Media Player"; appid:windows_media_player; sid:1000701; rev:1)
alert tcp any any -> any any (msg:"WinMX"; appid:winmx; sid:1000702; rev:1)
alert tcp any any -> any any (msg:"WiZiQ"; appid:wiziq; sid:1000703; rev:1)
alert tcp any any -> any any (msg:"Woot"; appid:woot; sid:1000704; rev:1)
alert tcp any any -> any any (msg:"WX"; appid:wx; sid:1000705; rev:1)
alert tcp any any -> any any (msg:"X font server"; appid:font-service; sid:1000706; rev:1)
alert tcp any any -> any any (msg:"Xbox Live"; appid:xbox_live; sid:1000707; rev:1)
alert tcp any any -> any any (msg:"XING"; appid:xing; sid:1000708; rev:1)
alert tcp any any -> any any (msg:"XM Radio Online"; appid:xm_radio_online; sid:1000709; rev:1)
alert tcp any any -> any any (msg:"Xunlei"; appid:xunlei; sid:1000710; rev:1)
alert tcp any any -> any any (msg:"XWindows"; appid:x11; sid:1000711; rev:1)
alert tcp any any -> any any (msg:"Yahoo! Voice"; appid:yahoo!_voice; sid:1000712; rev:1)
alert tcp any any -> any any (msg:"Yet ABC"; appid:yet_abc; sid:1000713; rev:1)
alert tcp any any -> any any (msg:"Hightail"; appid:hightail; sid:1000714; rev:1)
alert tcp any any -> any any (msg:"YouTube"; appid:youtube; sid:1000715; rev:1)
alert tcp any any -> any any (msg:"Zales"; appid:zales; sid:1000716; rev:1)
alert tcp any any -> any any (msg:"Zappos"; appid:zappos; sid:1000717; rev:1)
alert tcp any any -> any any (msg:"Zip.ca"; appid:zip.ca; sid:1000718; rev:1)
alert tcp any any -> any any (msg:"Cisco Secure Endpoint"; appid:cisco_secure_endpoint; sid:1000719; rev:1)
alert tcp any any -> any any (msg:"Yahoo! Messenger"; appid:yahoo_messenger; sid:1000720; rev:1)
alert tcp any any -> any any (msg:"Googlebot"; appid:googlebot; sid:1000721; rev:1)
alert tcp any any -> any any (msg:"Yelp"; appid:yelp; sid:1000722; rev:1)
alert tcp any any -> any any (msg:"Netflix stream"; appid:netflix_stream; sid:1000723; rev:1)
alert tcp any any -> any any (msg:"Yahoo! Slurp"; appid:yahoo_slurp; sid:1000724; rev:1)
alert tcp any any -> any any (msg:"Bingbot"; appid:bingbot; sid:1000725; rev:1)
alert tcp any any -> any any (msg:"Yahoo! Mail"; appid:yahoo_mail; sid:1000726; rev:1)
alert tcp any any -> any any (msg:"Yahoo! Toolbar"; appid:yahoo_toolbar; sid:1000727; rev:1)
alert tcp any any -> any any (msg:"Yahoo! Toolbar"; appid:4shared; sid:1000728; rev:1)
alert tcp any any -> any any (msg:"Salesforce.com"; appid:salesforce; sid:1000729; rev:1)
alert tcp any any -> any any (msg:"RitzCamera.com"; appid:ritzcamera.com; sid:1000730; rev:1)
alert tcp any any -> any any (msg:"Macy's"; appid:macys; sid:1000731; rev:1)
alert tcp any any -> any any (msg:"Macy's"; appid:whois; sid:1000732; rev:1)
alert tcp any any -> any any (msg:"Macy's"; appid:echo; sid:1000733; rev:1)
alert tcp any any -> any any (msg:"Macy's"; appid:daytime; sid:1000734; rev:1)
alert tcp any any -> any any (msg:"Ident"; appid:ident; sid:1000735; rev:1)
alert tcp any any -> any any (msg:"Pando"; appid:pando; sid:1000736; rev:1)
alert tcp any any -> any any (msg:"TeamViewer"; appid:teamviewer; sid:1000737; rev:1)
alert tcp any any -> any any (msg:"TeamViewer"; appid:7digital; sid:1000738; rev:1)
alert tcp any any -> any any (msg:"Chatroulette"; appid:chatroulette; sid:1000739; rev:1)
alert tcp any any -> any any (msg:"Cyworld"; appid:cyworld; sid:1000740; rev:1)
alert tcp any any -> any any (msg:"Daum"; appid:daum; sid:1000741; rev:1)
alert tcp any any -> any any (msg:"Deezer"; appid:deezer; sid:1000742; rev:1)
alert tcp any any -> any any (msg:"DivShare"; appid:divshare; sid:1000743; rev:1)
alert tcp any any -> any any (msg:"DivShare"; appid:dl.free.fr; sid:1000744; rev:1)
alert tcp any any -> any any (msg:"Evony"; appid:evony; sid:1000745; rev:1)
alert tcp any any -> any any (msg:"FileDropper"; appid:filedropper; sid:1000746; rev:1)
alert tcp any any -> any any (msg:"Filemail"; appid:filemail; sid:1000747; rev:1)
alert tcp any any -> any any (msg:"FileServe"; appid:fileserve; sid:1000748; rev:1)
alert tcp any any -> any any (msg:"Licorize"; appid:licorize; sid:1000749; rev:1)
alert tcp any any -> any any (msg:"Licorize"; appid:folkd; sid:1000750; rev:1)
alert tcp any any -> any any (msg:"FORA.tv"; appid:fora.tv; sid:1000751; rev:1)
alert tcp any any -> any any (msg:"GMX Mail"; appid:gmx_mail; sid:1000752; rev:1)
alert tcp any any -> any any (msg:"CiteULike"; appid:citeulike; sid:1000753; rev:1)
alert tcp any any -> any any (msg:"Habbo"; appid:habbo; sid:1000754; rev:1)
alert tcp any any -> any any (msg:"Hushmail"; appid:hushmail; sid:1000755; rev:1)
alert tcp any any -> any any (msg:"The Hype Machine"; appid:hype_machine; sid:1000756; rev:1)
alert tcp any any -> any any (msg:"iHeartRadio"; appid:iheartradio; sid:1000757; rev:1)
alert tcp any any -> any any (msg:"Issuu"; appid:issuu; sid:1000758; rev:1)
alert tcp any any -> any any (msg:"Jamendo"; appid:jamendo; sid:1000759; rev:1)
alert tcp any any -> any any (msg:"Jango"; appid:jango; sid:1000760; rev:1)
alert tcp any any -> any any (msg:"Justin.tv"; appid:justin.tv; sid:1000761; rev:1)
alert tcp any any -> any any (msg:"Kaixin001"; appid:kaixin001; sid:1000762; rev:1)
alert tcp any any -> any any (msg:"Livestream"; appid:livestream; sid:1000763; rev:1)
alert tcp any any -> any any (msg:"Me2day"; appid:me2day; sid:1000764; rev:1)
alert tcp any any -> any any (msg:"Megashare"; appid:megashare; sid:1000765; rev:1)
alert tcp any any -> any any (msg:"MyDownloader"; appid:mydownloader; sid:1000766; rev:1)
alert tcp any any -> any any (msg:"Neopets"; appid:neopets; sid:1000767; rev:1)
alert tcp any any -> any any (msg:"Omegle"; appid:omegle; sid:1000768; rev:1)
alert tcp any any -> any any (msg:"Mister Wong"; appid:mister_wong; sid:1000769; rev:1)
alert tcp any any -> any any (msg:"ProxEasy"; appid:proxeasy; sid:1000770; rev:1)
alert tcp any any -> any any (msg:"Qriocity"; appid:qriocity; sid:1000771; rev:1)
alert tcp any any -> any any (msg:"RuneScape"; appid:runescape; sid:1000772; rev:1)
alert tcp any any -> any any (msg:"Scribd"; appid:scribd; sid:1000773; rev:1)
alert tcp any any -> any any (msg:"Songza"; appid:songza; sid:1000774; rev:1)
alert tcp any any -> any any (msg:"SoundCloud"; appid:soundcloud; sid:1000775; rev:1)
alert tcp any any -> any any (msg:"Surrogafier"; appid:surrogafier; sid:1000776; rev:1)
alert tcp any any -> any any (msg:"Tinychat"; appid:tinychat; sid:1000777; rev:1)
alert tcp any any -> any any (msg:"Tudou"; appid:tudou; sid:1000778; rev:1)
alert tcp any any -> any any (msg:"TransferBigFiles.com"; appid:transferbigfiles.com; sid:1000779; rev:1)
alert tcp any any -> any any (msg:"Tuenti"; appid:tuenti; sid:1000780; rev:1)
alert tcp any any -> any any (msg:"VKontakte"; appid:vkontakte; sid:1000781; rev:1)
alert tcp any any -> any any (msg:"VTunnel"; appid:vtunnel; sid:1000782; rev:1)
alert tcp any any -> any any (msg:"Webhard"; appid:webhard; sid:1000783; rev:1)
alert tcp any any -> any any (msg:"Webshots"; appid:webshots; sid:1000784; rev:1)
alert tcp any any -> any any (msg:"Weibo"; appid:weibo; sid:1000785; rev:1)
alert tcp any any -> any any (msg:"WooMe"; appid:woome; sid:1000786; rev:1)
alert tcp any any -> any any (msg:"BigUpload"; appid:bigupload; sid:1000787; rev:1)
alert tcp any any -> any any (msg:"Clarizen"; appid:clarizen; sid:1000788; rev:1)
alert tcp any any -> any any (msg:"Clarizen"; appid:56.com; sid:1000789; rev:1)
alert tcp any any -> any any (msg:"Clarizen"; appid:51.com; sid:1000790; rev:1)
alert tcp any any -> any any (msg:"Youku"; appid:youku; sid:1000791; rev:1)
alert tcp any any -> any any (msg:"Crackle"; appid:crackle; sid:1000792; rev:1)
alert tcp any any -> any any (msg:"RuTube"; appid:rutube; sid:1000793; rev:1)
alert tcp any any -> any any (msg:"Afreeca"; appid:afreeca; sid:1000794; rev:1)
alert tcp any any -> any any (msg:"Babelgum"; appid:babelgum; sid:1000795; rev:1)
alert tcp any any -> any any (msg:"MOG"; appid:mog; sid:1000796; rev:1)
alert tcp any any -> any any (msg:"Phanfare"; appid:phanfare; sid:1000797; rev:1)
alert tcp any any -> any any (msg:"FilmOn"; appid:filmon; sid:1000798; rev:1)
alert tcp any any -> any any (msg:"Mibbit"; appid:mibbit; sid:1000799; rev:1)
alert tcp any any -> any any (msg:"BigBlueButton"; appid:bigbluebutton; sid:1000800; rev:1)
alert tcp any any -> any any (msg:"TwitchTV"; appid:twitchtv; sid:1000801; rev:1)
alert tcp any any -> any any (msg:"MegaMeeting"; appid:megameeting; sid:1000802; rev:1)
alert tcp any any -> any any (msg:"Badoo"; appid:badoo; sid:1000803; rev:1)
alert tcp any any -> any any (msg:"DepositFiles"; appid:depositfiles; sid:1000804; rev:1)
alert tcp any any -> any any (msg:"CloudMe"; appid:cloudme; sid:1000805; rev:1)
alert tcp any any -> any any (msg:"Skyrock"; appid:skyrock; sid:1000806; rev:1)
alert tcp any any -> any any (msg:"Jubii"; appid:jubii; sid:1000807; rev:1)
alert tcp any any -> any any (msg:"TwitPic"; appid:twitpic; sid:1000808; rev:1)
alert tcp any any -> any any (msg:"TwitPic"; appid:yfrog; sid:1000809; rev:1)
alert tcp any any -> any any (msg:"Tagged"; appid:tagged; sid:1000810; rev:1)
alert tcp any any -> any any (msg:"Tagged"; appid:hi5; sid:1000811; rev:1)
alert tcp any any -> any any (msg:"Livemocha"; appid:livemocha; sid:1000812; rev:1)
alert tcp any any -> any any (msg:"Slacker"; appid:slacker; sid:1000813; rev:1)
alert tcp any any -> any any (msg:"Douban"; appid:douban; sid:1000814; rev:1)
alert tcp any any -> any any (msg:"Odnoklassniki"; appid:odnoklassniki; sid:1000815; rev:1)
alert tcp any any -> any any (msg:"Gaia Online"; appid:gaia_online; sid:1000816; rev:1)
alert tcp any any -> any any (msg:"MyHeritage"; appid:myheritage; sid:1000817; rev:1)
alert tcp any any -> any any (msg:"AutoZone"; appid:autozone; sid:1000818; rev:1)
alert tcp any any -> any any (msg:"Dangdang"; appid:dangdang; sid:1000819; rev:1)
alert tcp any any -> any any (msg:"Insight"; appid:insight; sid:1000820; rev:1)
alert tcp any any -> any any (msg:"iCal"; appid:ical; sid:1000821; rev:1)
alert tcp any any -> any any (msg:"Tesco.com"; appid:tesco.com; sid:1000822; rev:1)
alert tcp any any -> any any (msg:"Tesco.com"; appid:xda-developers; sid:1000823; rev:1)
alert tcp any any -> any any (msg:"Tesco.com"; appid:4chan; sid:1000824; rev:1)
alert tcp any any -> any any (msg:"NeoGAF"; appid:neogaf; sid:1000825; rev:1)
alert tcp any any -> any any (msg:"Rhapsody"; appid:rhapsody; sid:1000826; rev:1)
alert tcp any any -> any any (msg:"Balatarin"; appid:balatarin; sid:1000827; rev:1)
alert tcp any any -> any any (msg:"Movieclips"; appid:movieclips; sid:1000828; rev:1)
alert tcp any any -> any any (msg:"RDT"; appid:rdt; sid:1000829; rev:1)
alert tcp any any -> any any (msg:"Steam"; appid:steam; sid:1000830; rev:1)
alert tcp any any -> any any (msg:"9P"; appid:9p; sid:1000831; rev:1)
alert tcp any any -> any any (msg:"MSDP"; appid:msdp; sid:1000832; rev:1)
alert tcp any any -> any any (msg:"RealAudio"; appid:realaudio; sid:1000833; rev:1)
alert tcp any any -> any any (msg:"TeamSpeak"; appid:teamspeak; sid:1000834; rev:1)
alert tcp any any -> any any (msg:"Ventrilo"; appid:ventrilo; sid:1000835; rev:1)
alert tcp any any -> any any (msg:"Winamp"; appid:winamp; sid:1000836; rev:1)
alert tcp any any -> any any (msg:"Advanced Packaging Tool"; appid:apt; sid:1000837; rev:1)
alert tcp any any -> any any (msg:"iWARP"; appid:iwarp; sid:1000838; rev:1)
alert tcp any any -> any any (msg:"IPP"; appid:ipp; sid:1000839; rev:1)
alert tcp any any -> any any (msg:"NDMP"; appid:ndmp; sid:1000840; rev:1)
alert tcp any any -> any any (msg:"NDMP"; appid:rsync; sid:1000841; rev:1)
alert tcp any any -> any any (msg:"OPC"; appid:opc; sid:1000842; rev:1)
alert tcp any any -> any any (msg:"Paltalk File Transfer"; appid:paltalkfilexfer; sid:1000843; rev:1)
alert tcp any any -> any any (msg:"Windows Update"; appid:windows_update; sid:1000844; rev:1)
alert tcp any any -> any any (msg:"IMO"; appid:imo; sid:1000845; rev:1)
alert tcp any any -> any any (msg:"PC Connection"; appid:pc_connection; sid:1000846; rev:1)
alert tcp any any -> any any (msg:"ASF"; appid:asf; sid:1000847; rev:1)
alert tcp any any -> any any (msg:"DDM-SSL"; appid:ddm_ssl; sid:1000848; rev:1)
alert tcp any any -> any any (msg:"SMTPS"; appid:smtps; sid:1000849; rev:1)
alert tcp any any -> any any (msg:"NNTPS"; appid:nntps; sid:1000850; rev:1)
alert tcp any any -> any any (msg:"IMAPS"; appid:imaps; sid:1000851; rev:1)
alert tcp any any -> any any (msg:"SShell"; appid:sshell; sid:1000852; rev:1)
alert tcp any any -> any any (msg:"LDAPS"; appid:ldaps; sid:1000853; rev:1)
alert tcp any any -> any any (msg:"TELNETS"; appid:telnets; sid:1000854; rev:1)
alert tcp any any -> any any (msg:"IRCS"; appid:ircs; sid:1000855; rev:1)
alert tcp any any -> any any (msg:"POP3S"; appid:pop3s; sid:1000856; rev:1)
alert tcp any any -> any any (msg:"MS Global Catalog Secure"; appid:msgblcatsec; sid:1000857; rev:1)
alert tcp any any -> any any (msg:"SF MGMT"; appid:sf_mgmt; sid:1000858; rev:1)
alert tcp any any -> any any (msg:"HTTPS"; appid:https; sid:1000859; rev:1)
alert tcp any any -> any any (msg:"Tweet"; appid:tweet; sid:1000860; rev:1)
alert tcp any any -> any any (msg:"Adobe Connect"; appid:adobe_connect; sid:1000861; rev:1)
alert tcp any any -> any any (msg:"BitTornado"; appid:bittornado; sid:1000862; rev:1)
alert tcp any any -> any any (msg:"CafeMom"; appid:cafemom; sid:1000863; rev:1)
alert tcp any any -> any any (msg:"MetaCrawler"; appid:metacrawler; sid:1000864; rev:1)
alert tcp any any -> any any (msg:"Mininova"; appid:mininova; sid:1000865; rev:1)
alert tcp any any -> any any (msg:"PayPal"; appid:paypal; sid:1000866; rev:1)
alert tcp any any -> any any (msg:"Pinterest"; appid:pinterest; sid:1000867; rev:1)
alert tcp any any -> any any (msg:"The Pirate Bay"; appid:pirate_bay; sid:1000868; rev:1)
alert tcp any any -> any any (msg:"Technorati"; appid:technorati; sid:1000869; rev:1)
alert tcp any any -> any any (msg:"Torrentz"; appid:torrentz; sid:1000870; rev:1)
alert tcp any any -> any any (msg:"TypePad"; appid:typepad; sid:1000871; rev:1)
alert tcp any any -> any any (msg:"Hotspot Shield"; appid:hotspot_shield; sid:1000872; rev:1)
alert tcp any any -> any any (msg:"Zabbix"; appid:zabbix; sid:1000873; rev:1)
alert tcp any any -> any any (msg:"Zabbix Trap"; appid:zabbix_trap; sid:1000874; rev:1)
alert tcp any any -> any any (msg:"WhatsApp"; appid:whatsapp; sid:1000875; rev:1)
alert tcp any any -> any any (msg:"Munin"; appid:munin; sid:1000876; rev:1)
alert tcp any any -> any any (msg:"ASProxy"; appid:asproxy; sid:1000877; rev:1)
alert tcp any any -> any any (msg:"Google Toolbar"; appid:google_toolbar; sid:1000878; rev:1)
alert tcp any any -> any any (msg:"DynGate"; appid:dyngate; sid:1000879; rev:1)
alert tcp any any -> any any (msg:"Pinger"; appid:pinger; sid:1000880; rev:1)
alert tcp any any -> any any (msg:"Line2"; appid:line2; sid:1000881; rev:1)
alert tcp any any -> any any (msg:"SCCM"; appid:sccm; sid:1000882; rev:1)
alert tcp any any -> any any (msg:"Steam social networking"; appid:steam_social_networking; sid:1000883; rev:1)
alert tcp any any -> any any (msg:"Hamachi"; appid:hamachi; sid:1000884; rev:1)
alert tcp any any -> any any (msg:"Spotify"; appid:spotify; sid:1000885; rev:1)
alert tcp any any -> any any (msg:"Bubble Witch Saga"; appid:bubble_witch; sid:1000886; rev:1)
alert tcp any any -> any any (msg:"Angry Birds"; appid:angry_birds; sid:1000887; rev:1)
alert tcp any any -> any any (msg:"Words With Friends"; appid:words_friends; sid:1000888; rev:1)
alert tcp any any -> any any (msg:"Cityville"; appid:cityville; sid:1000889; rev:1)
alert tcp any any -> any any (msg:"About.com"; appid:about.com; sid:1000890; rev:1)
alert tcp any any -> any any (msg:"Answers.com"; appid:answers.com; sid:1000891; rev:1)
alert tcp any any -> any any (msg:"Classmates"; appid:classmates; sid:1000892; rev:1)
alert tcp any any -> any any (msg:"CNET"; appid:cnet; sid:1000893; rev:1)
alert tcp any any -> any any (msg:"CNET Download"; appid:cnet_download; sid:1000894; rev:1)
alert tcp any any -> any any (msg:"DomainTools"; appid:domaintools; sid:1000895; rev:1)
alert tcp any any -> any any (msg:"IBM"; appid:ibm; sid:1000896; rev:1)
alert tcp any any -> any any (msg:"Open Webmail"; appid:open_webmail; sid:1000897; rev:1)
alert tcp any any -> any any (msg:"SlideShare"; appid:slideshare; sid:1000898; rev:1)
alert tcp any any -> any any (msg:"Sourceforge"; appid:sourceforge; sid:1000899; rev:1)
alert tcp any any -> any any (msg:"SurveyMonkey"; appid:surveymonkey; sid:1000900; rev:1)
alert tcp any any -> any any (msg:"SurveyMonkey"; appid:w3schools.com; sid:1000901; rev:1)
alert tcp any any -> any any (msg:"Weebly"; appid:weebly; sid:1000902; rev:1)
alert tcp any any -> any any (msg:"Google Maps"; appid:google_maps; sid:1000903; rev:1)
alert tcp any any -> any any (msg:"APNS"; appid:apns; sid:1000904; rev:1)
alert tcp any any -> any any (msg:"Apple sites"; appid:apple_sites; sid:1000905; rev:1)
alert tcp any any -> any any (msg:"iCloud"; appid:icloud; sid:1000906; rev:1)
alert tcp any any -> any any (msg:"PCoIP"; appid:pcoip; sid:1000907; rev:1)
alert tcp any any -> any any (msg:"CNN.com"; appid:cnn; sid:1000908; rev:1)
alert tcp any any -> any any (msg:"IMDB"; appid:imdb; sid:1000909; rev:1)
alert tcp any any -> any any (msg:"NBC News"; appid:nbc_news; sid:1000910; rev:1)
alert tcp any any -> any any (msg:"Mint.com"; appid:mint; sid:1000911; rev:1)
alert tcp any any -> any any (msg:"Apple Trailers"; appid:apple_trailers; sid:1000912; rev:1)
alert tcp any any -> any any (msg:"Dictionary.com"; appid:dictionary; sid:1000913; rev:1)
alert tcp any any -> any any (msg:"Bild.de"; appid:bild.de; sid:1000914; rev:1)
alert tcp any any -> any any (msg:"Bing Maps"; appid:bing_maps; sid:1000915; rev:1)
alert tcp any any -> any any (msg:"Google Finance"; appid:google_finance; sid:1000916; rev:1)
alert tcp any any -> any any (msg:"Google Finance"; appid:12306.cn; sid:1000917; rev:1)
alert tcp any any -> any any (msg:"Google Finance"; appid:126.com; sid:1000918; rev:1)
alert tcp any any -> any any (msg:"Google Finance"; appid:39.net; sid:1000919; rev:1)
alert tcp any any -> any any (msg:"Aizhan"; appid:aizhan; sid:1000920; rev:1)
alert tcp any any -> any any (msg:"Bet365"; appid:bet365; sid:1000921; rev:1)
alert tcp any any -> any any (msg:"Brothersoft"; appid:brothersoft; sid:1000922; rev:1)
alert tcp any any -> any any (msg:"Brighttalk"; appid:brighttalk; sid:1000923; rev:1)
alert tcp any any -> any any (msg:"Enet"; appid:enet; sid:1000924; rev:1)
alert tcp any any -> any any (msg:"Envato"; appid:envato; sid:1000925; rev:1)
alert tcp any any -> any any (msg:"ExtraTorrent"; appid:extratorrent; sid:1000926; rev:1)
alert tcp any any -> any any (msg:"Glype Proxy"; appid:glype_proxy; sid:1000927; rev:1)
alert tcp any any -> any any (msg:"Glype Proxy"; appid:goo.ne.jp; sid:1000928; rev:1)
alert tcp any any -> any any (msg:"Image Venue"; appid:image_venue; sid:1000929; rev:1)
alert tcp any any -> any any (msg:"Leboncoin"; appid:leboncoin; sid:1000930; rev:1)
alert tcp any any -> any any (msg:"Multiupload"; appid:multiupload; sid:1000931; rev:1)
alert tcp any any -> any any (msg:"Netease"; appid:netease; sid:1000932; rev:1)
alert tcp any any -> any any (msg:"Online File Folder"; appid:online_file_folder; sid:1000933; rev:1)
alert tcp any any -> any any (msg:"Putlocker"; appid:putlocker; sid:1000934; rev:1)
alert tcp any any -> any any (msg:"Raging Bull"; appid:raging_bull; sid:1000935; rev:1)
alert tcp any any -> any any (msg:"Soku"; appid:soku; sid:1000936; rev:1)
alert tcp any any -> any any (msg:"Theme Forest"; appid:theme_forest; sid:1000937; rev:1)
alert tcp any any -> any any (msg:"Webs"; appid:webs; sid:1000938; rev:1)
alert tcp any any -> any any (msg:"Bejeweled Chrome Extension"; appid:bejeweled_chrome_extension; sid:1000939; rev:1)
alert tcp any any -> any any (msg:"Google Play Books"; appid:gplay_books; sid:1000940; rev:1)
alert tcp any any -> any any (msg:"Google Play Music"; appid:gplay_music; sid:1000941; rev:1)
alert tcp any any -> any any (msg:"Google Reader"; appid:google_reader; sid:1000942; rev:1)
alert tcp any any -> any any (msg:"Instagram"; appid:instagram; sid:1000943; rev:1)
alert tcp any any -> any any (msg:"DoubleDownCasino"; appid:doubledowncasino; sid:1000944; rev:1)
alert tcp any any -> any any (msg:"iAstrology"; appid:iastrology; sid:1000945; rev:1)
alert tcp any any -> any any (msg:"Social Empires"; appid:social_empires; sid:1000946; rev:1)
alert tcp any any -> any any (msg:"Daily Horoscope"; appid:daily_horoscope; sid:1000947; rev:1)
alert tcp any any -> any any (msg:"Slotomania"; appid:slotomania; sid:1000948; rev:1)
alert tcp any any -> any any (msg:"Bubble Saga"; appid:bubble_saga; sid:1000949; rev:1)
alert tcp any any -> any any (msg:"BranchOut"; appid:branchout; sid:1000950; rev:1)
alert tcp any any -> any any (msg:"Bejeweled Blitz"; appid:bejeweled_blitz; sid:1000951; rev:1)
alert tcp any any -> any any (msg:"Bejeweled Blitz"; appid:4399.com; sid:1000952; rev:1)
alert tcp any any -> any any (msg:"AdF.ly"; appid:adf.ly; sid:1000953; rev:1)
alert tcp any any -> any any (msg:"Admin5"; appid:admin5; sid:1000954; rev:1)
alert tcp any any -> any any (msg:"Bloomberg"; appid:bloomberg; sid:1000955; rev:1)
alert tcp any any -> any any (msg:"Mozilla"; appid:mozilla; sid:1000956; rev:1)
alert tcp any any -> any any (msg:"Wretch"; appid:wretch; sid:1000957; rev:1)
alert tcp any any -> any any (msg:"Y8"; appid:y8; sid:1000958; rev:1)
alert tcp any any -> any any (msg:"Avast"; appid:avast; sid:1000959; rev:1)
alert tcp any any -> any any (msg:"Allmyapps"; appid:allmyapps; sid:1000960; rev:1)
alert tcp any any -> any any (msg:"Evernote"; appid:evernote; sid:1000961; rev:1)
alert tcp any any -> any any (msg:"Seamonkey"; appid:seamonkey; sid:1000962; rev:1)
alert tcp any any -> any any (msg:"Facebook search"; appid:fb_search; sid:1000963; rev:1)
alert tcp any any -> any any (msg:"Facebook event"; appid:fb_event; sid:1000964; rev:1)
alert tcp any any -> any any (msg:"Facebook Status Update"; appid:fb_post; sid:1000965; rev:1)
alert tcp any any -> any any (msg:"Facebook video chat"; appid:fb_video_chat; sid:1000966; rev:1)
alert tcp any any -> any any (msg:"Facebook Message"; appid:fb_message; sid:1000967; rev:1)
alert tcp any any -> any any (msg:"Facebook video"; appid:fb_video; sid:1000968; rev:1)
alert tcp any any -> any any (msg:"Opera"; appid:opera; sid:1000969; rev:1)
alert tcp any any -> any any (msg:"AdobeAIR"; appid:adobeair; sid:1000970; rev:1)
alert tcp any any -> any any (msg:"SSL client"; appid:ssl_client; sid:1000971; rev:1)
alert tcp any any -> any any (msg:"Wooga"; appid:wooga; sid:1000972; rev:1)
alert tcp any any -> any any (msg:"The New York Times"; appid:nytimes; sid:1000973; rev:1)
alert tcp any any -> any any (msg:"Twitter Link Service"; appid:twitter_link; sid:1000974; rev:1)
alert tcp any any -> any any (msg:"Yahoo! Finance"; appid:yahoo_finance; sid:1000975; rev:1)
alert tcp any any -> any any (msg:"Silverlight"; appid:silverlight; sid:1000976; rev:1)
alert tcp any any -> any any (msg:"GO.com"; appid:go.com; sid:1000977; rev:1)
alert tcp any any -> any any (msg:"OnLive"; appid:onlive; sid:1000978; rev:1)
alert tcp any any -> any any (msg:"Ad Advisor"; appid:ad_advisor; sid:1000979; rev:1)
alert tcp any any -> any any (msg:"Ad Mob"; appid:ad_mob; sid:1000980; rev:1)
alert tcp any any -> any any (msg:"Ad Marvel"; appid:ad_marvel; sid:1000981; rev:1)
alert tcp any any -> any any (msg:"Naver"; appid:naver; sid:1000982; rev:1)
alert tcp any any -> any any (msg:"Doubleclick"; appid:doubleclick; sid:1000983; rev:1)
alert tcp any any -> any any (msg:"Ad Nexus"; appid:ad_nexus; sid:1000984; rev:1)
alert tcp any any -> any any (msg:"Pubmatic"; appid:pubmatic; sid:1000985; rev:1)
alert tcp any any -> any any (msg:"iAd"; appid:iad; sid:1000986; rev:1)
alert tcp any any -> any any (msg:"Acrobat.com"; appid:acrobat.com; sid:1000987; rev:1)
alert tcp any any -> any any (msg:"Box"; appid:box; sid:1000988; rev:1)
alert tcp any any -> any any (msg:"Pandora TV"; appid:pandora_tv; sid:1000989; rev:1)
alert tcp any any -> any any (msg:"CBS"; appid:cbs; sid:1000990; rev:1)
alert tcp any any -> any any (msg:"USA Today"; appid:usa_today; sid:1000991; rev:1)
alert tcp any any -> any any (msg:"Microsoft Ads"; appid:microsoft_ads; sid:1000992; rev:1)
alert tcp any any -> any any (msg:"Weather Underground"; appid:weather_undrgrd; sid:1000993; rev:1)
alert tcp any any -> any any (msg:"Clubbox"; appid:clubbox; sid:1000994; rev:1)
alert tcp any any -> any any (msg:"Kiwoom"; appid:kiwoom; sid:1000995; rev:1)
alert tcp any any -> any any (msg:"DCinside"; appid:dcinside; sid:1000996; rev:1)
alert tcp any any -> any any (msg:"Nate"; appid:nate; sid:1000997; rev:1)
alert tcp any any -> any any (msg:"Fileguri"; appid:fileguri; sid:1000998; rev:1)
alert tcp any any -> any any (msg:"Baidu"; appid:baidu; sid:1000999; rev:1)
alert tcp any any -> any any (msg:"Babylon"; appid:babylon; sid:1001000; rev:1)
alert tcp any any -> any any (msg:"Samsung"; appid:samsung; sid:1001001; rev:1)
alert tcp any any -> any any (msg:"TweetDeck"; appid:tweetdeck; sid:1001002; rev:1)
alert tcp any any -> any any (msg:"CanvasRider"; appid:canvasrider; sid:1001003; rev:1)
alert tcp any any -> any any (msg:"ZEDO"; appid:zedo; sid:1001004; rev:1)
alert tcp any any -> any any (msg:"eHow"; appid:ehow; sid:1001005; rev:1)
alert tcp any any -> any any (msg:"ESPN"; appid:espn; sid:1001006; rev:1)
alert tcp any any -> any any (msg:"Comcast"; appid:comcast; sid:1001007; rev:1)
alert tcp any any -> any any (msg:"Fox News"; appid:foxnews; sid:1001008; rev:1)
alert tcp any any -> any any (msg:"Weather.com"; appid:weather.com; sid:1001009; rev:1)
alert tcp any any -> any any (msg:"Weather.gov"; appid:weather.gov; sid:1001010; rev:1)
alert tcp any any -> any any (msg:"Outbrain"; appid:outbrain; sid:1001011; rev:1)
alert tcp any any -> any any (msg:"The Huffington Post"; appid:huffington_post; sid:1001012; rev:1)
alert tcp any any -> any any (msg:"Ask.com"; appid:ask.com; sid:1001013; rev:1)
alert tcp any any -> any any (msg:"OptMD"; appid:optmd; sid:1001014; rev:1)
alert tcp any any -> any any (msg:"GoDaddy"; appid:godaddy; sid:1001015; rev:1)
alert tcp any any -> any any (msg:"Etsy"; appid:etsy; sid:1001016; rev:1)
alert tcp any any -> any any (msg:"Conduit"; appid:conduit; sid:1001017; rev:1)
alert tcp any any -> any any (msg:"BBC"; appid:bbc; sid:1001018; rev:1)
alert tcp any any -> any any (msg:"Indeed"; appid:indeed; sid:1001019; rev:1)
alert tcp any any -> any any (msg:"Publishers Clearing House"; appid:pub_clear_house; sid:1001020; rev:1)
alert tcp any any -> any any (msg:"AT&T"; appid:at&t; sid:1001021; rev:1)
alert tcp any any -> any any (msg:"Aweber"; appid:aweber; sid:1001022; rev:1)
alert tcp any any -> any any (msg:"Fox Sports"; appid:fox_sports; sid:1001023; rev:1)
alert tcp any any -> any any (msg:"Searchnu"; appid:searchnu; sid:1001024; rev:1)
alert tcp any any -> any any (msg:"Official Major League Baseball"; appid:mlb; sid:1001025; rev:1)
alert tcp any any -> any any (msg:"RoadRunner"; appid:roadrunner; sid:1001026; rev:1)
alert tcp any any -> any any (msg:"Drudge Report"; appid:drudge_report; sid:1001027; rev:1)
alert tcp any any -> any any (msg:"Verizon Wireless"; appid:verizon_wireless; sid:1001028; rev:1)
alert tcp any any -> any any (msg:"ABC"; appid:abc; sid:1001029; rev:1)
alert tcp any any -> any any (msg:"Wall Street Journal"; appid:wsj; sid:1001030; rev:1)
alert tcp any any -> any any (msg:"Daily Mail"; appid:daily_mail; sid:1001031; rev:1)
alert tcp any any -> any any (msg:"Amazon Web Services"; appid:aws; sid:1001032; rev:1)
alert tcp any any -> any any (msg:"CloudFront"; appid:cloudfront; sid:1001033; rev:1)
alert tcp any any -> any any (msg:"Sourcefire.com"; appid:sourcefire; sid:1001034; rev:1)
alert tcp any any -> any any (msg:"Taobao"; appid:taobao; sid:1001035; rev:1)
alert tcp any any -> any any (msg:"Planetarium"; appid:planetarium; sid:1001036; rev:1)
alert tcp any any -> any any (msg:"Engadget"; appid:engadget; sid:1001037; rev:1)
alert tcp any any -> any any (msg:"Flipboard"; appid:flipboard; sid:1001038; rev:1)
alert tcp any any -> any any (msg:"TED"; appid:ted; sid:1001039; rev:1)
alert tcp any any -> any any (msg:"KakaoTalk"; appid:kakaotalk; sid:1001040; rev:1)
alert tcp any any -> any any (msg:"Flurry Analytics"; appid:flurry_analytics; sid:1001041; rev:1)
alert tcp any any -> any any (msg:"Apple Stocks"; appid:apple_stocks; sid:1001042; rev:1)
alert tcp any any -> any any (msg:"Ubuntu Software Center"; appid:ubuntu_software_center; sid:1001043; rev:1)
alert tcp any any -> any any (msg:"Ubuntu Update Manager"; appid:ubuntu_update_manager; sid:1001044; rev:1)
alert tcp any any -> any any (msg:"Python-httplib"; appid:python-httplib; sid:1001045; rev:1)
alert tcp any any -> any any (msg:"Eclipse Updates"; appid:eclipse_updates; sid:1001046; rev:1)
alert tcp any any -> any any (msg:"Eclipse"; appid:eclipse; sid:1001047; rev:1)
alert tcp any any -> any any (msg:"Eclipse Marketplace"; appid:eclipse_marketplace; sid:1001048; rev:1)
alert tcp any any -> any any (msg:"NASA"; appid:nasa; sid:1001049; rev:1)
alert tcp any any -> any any (msg:"NATO"; appid:nato; sid:1001050; rev:1)
alert tcp any any -> any any (msg:"AOL"; appid:aol; sid:1001051; rev:1)
alert tcp any any -> any any (msg:"NOAA"; appid:noaa; sid:1001052; rev:1)
alert tcp any any -> any any (msg:"WeatherBug"; appid:weatherbug; sid:1001053; rev:1)
alert tcp any any -> any any (msg:"FC2"; appid:fc2; sid:1001054; rev:1)
alert tcp any any -> any any (msg:"Microsoft"; appid:microsoft; sid:1001055; rev:1)
alert tcp any any -> any any (msg:"Google Adsense"; appid:google_adsense; sid:1001056; rev:1)
alert tcp any any -> any any (msg:"AdNetwork.net"; appid:adnetwork.net; sid:1001057; rev:1)
alert tcp any any -> any any (msg:"Localytics"; appid:localytics; sid:1001058; rev:1)
alert tcp any any -> any any (msg:"Nokia Maps"; appid:nokia_maps; sid:1001059; rev:1)
alert tcp any any -> any any (msg:"SymantecUpdates"; appid:symantecupdates; sid:1001060; rev:1)
alert tcp any any -> any any (msg:"Wolfram Alpha"; appid:wolfram_alpha; sid:1001061; rev:1)
alert tcp any any -> any any (msg:"Libwww-Perl"; appid:libwww-perl; sid:1001062; rev:1)
alert tcp any any -> any any (msg:"Norton AntiVirus"; appid:norton_av; sid:1001063; rev:1)
alert tcp any any -> any any (msg:"FastCGI"; appid:fast_cgi; sid:1001064; rev:1)
alert tcp any any -> any any (msg:"TPNCP"; appid:tpncp; sid:1001065; rev:1)
alert tcp any any -> any any (msg:"SMPP"; appid:smpp; sid:1001066; rev:1)
alert tcp any any -> any any (msg:"Kismet"; appid:kismet; sid:1001067; rev:1)
alert tcp any any -> any any (msg:"Sports Illustrated"; appid:sports_illus; sid:1001068; rev:1)
alert tcp any any -> any any (msg:"CPX Interactive"; appid:cpx_interactive; sid:1001069; rev:1)
alert tcp any any -> any any (msg:"VeriSign"; appid:verisign; sid:1001070; rev:1)
alert tcp any any -> any any (msg:"CBS Sports"; appid:cbs_sports; sid:1001071; rev:1)
alert tcp any any -> any any (msg:"Chartbeat"; appid:chartbeat; sid:1001072; rev:1)
alert tcp any any -> any any (msg:"InsightExpress"; appid:insightexpress; sid:1001073; rev:1)
alert tcp any any -> any any (msg:"Zillow"; appid:zillow; sid:1001074; rev:1)
alert tcp any any -> any any (msg:"Monster.com"; appid:monster; sid:1001075; rev:1)
alert tcp any any -> any any (msg:"MapQuest"; appid:mapquest; sid:1001076; rev:1)
alert tcp any any -> any any (msg:"Swagbucks"; appid:swagbucks; sid:1001077; rev:1)
alert tcp any any -> any any (msg:"Verizon"; appid:verizon; sid:1001078; rev:1)
alert tcp any any -> any any (msg:"Wikia"; appid:wikia; sid:1001079; rev:1)
alert tcp any any -> any any (msg:"TMZ"; appid:tmz; sid:1001080; rev:1)
alert tcp any any -> any any (msg:"ShopAtHome"; appid:shopathome; sid:1001081; rev:1)
alert tcp any any -> any any (msg:"Asia Times Online"; appid:asia_times_online; sid:1001082; rev:1)
alert tcp any any -> any any (msg:"HootSuite"; appid:hootsuite; sid:1001083; rev:1)
alert tcp any any -> any any (msg:"Coupons.com"; appid:coupons; sid:1001084; rev:1)
alert tcp any any -> any any (msg:"CareerBuilder.com"; appid:careerbuilder; sid:1001085; rev:1)
alert tcp any any -> any any (msg:"Commission Junction"; appid:commission_junction; sid:1001086; rev:1)
alert tcp any any -> any any (msg:"Fiverr"; appid:fiverr; sid:1001087; rev:1)
alert tcp any any -> any any (msg:"Backpage.com"; appid:backpage; sid:1001088; rev:1)
alert tcp any any -> any any (msg:"LivingSocial"; appid:livingsocial; sid:1001089; rev:1)
alert tcp any any -> any any (msg:"AllRecipes"; appid:allrecipes; sid:1001090; rev:1)
alert tcp any any -> any any (msg:"Yellow Pages"; appid:yellow_pages; sid:1001091; rev:1)
alert tcp any any -> any any (msg:"Bleacher Report"; appid:bleacher_report; sid:1001092; rev:1)
alert tcp any any -> any any (msg:"Stack Overflow"; appid:stack_overflow; sid:1001093; rev:1)
alert tcp any any -> any any (msg:"U.S.Bank"; appid:usbank; sid:1001094; rev:1)
alert tcp any any -> any any (msg:"Ancestry.com"; appid:ancestry; sid:1001095; rev:1)
alert tcp any any -> any any (msg:"WebMD"; appid:webmd; sid:1001096; rev:1)
alert tcp any any -> any any (msg:"Trulia"; appid:trulia; sid:1001097; rev:1)
alert tcp any any -> any any (msg:"Slickdeals"; appid:slickdeals; sid:1001098; rev:1)
alert tcp any any -> any any (msg:"Business Insider"; appid:business_insider; sid:1001099; rev:1)
alert tcp any any -> any any (msg:"People.com"; appid:people; sid:1001100; rev:1)
alert tcp any any -> any any (msg:"Reuters"; appid:reuters; sid:1001101; rev:1)
alert tcp any any -> any any (msg:"BuzzFeed"; appid:buzzfeed; sid:1001102; rev:1)
alert tcp any any -> any any (msg:"California.gov"; appid:california.gov; sid:1001103; rev:1)
alert tcp any any -> any any (msg:"Southwest Airlines"; appid:southwest_airlines; sid:1001104; rev:1)
alert tcp any any -> any any (msg:"NIH"; appid:nih; sid:1001105; rev:1)
alert tcp any any -> any any (msg:"WhitePages Inc"; appid:whitepages; sid:1001106; rev:1)
alert tcp any any -> any any (msg:"MGID"; appid:mgid; sid:1001107; rev:1)
alert tcp any any -> any any (msg:"EarthLink"; appid:earthlink; sid:1001108; rev:1)
alert tcp any any -> any any (msg:"Disney"; appid:disney; sid:1001109; rev:1)
alert tcp any any -> any any (msg:"POLITICO.com"; appid:politico; sid:1001110; rev:1)
alert tcp any any -> any any (msg:"NY Daily News"; appid:ny_daily_news; sid:1001111; rev:1)
alert tcp any any -> any any (msg:"Examiner.com"; appid:examiner; sid:1001112; rev:1)
alert tcp any any -> any any (msg:"RetailMeNot"; appid:retailmenot; sid:1001113; rev:1)
alert tcp any any -> any any (msg:"AddThis"; appid:addthis; sid:1001114; rev:1)
alert tcp any any -> any any (msg:"StatCounter"; appid:statcounter; sid:1001115; rev:1)
alert tcp any any -> any any (msg:"OkCupid"; appid:okcupid; sid:1001116; rev:1)
alert tcp any any -> any any (msg:"Patch.com"; appid:patch; sid:1001117; rev:1)
alert tcp any any -> any any (msg:"Legacy.com"; appid:legacy; sid:1001118; rev:1)
alert tcp any any -> any any (msg:"Realtor.com"; appid:realtor; sid:1001119; rev:1)
alert tcp any any -> any any (msg:"Intuit"; appid:intuit; sid:1001120; rev:1)
alert tcp any any -> any any (msg:"The Blaze"; appid:the_blaze; sid:1001121; rev:1)
alert tcp any any -> any any (msg:"HostGator"; appid:hostgator; sid:1001122; rev:1)
alert tcp any any -> any any (msg:"Food Network"; appid:food_network; sid:1001123; rev:1)
alert tcp any any -> any any (msg:"ClickBank"; appid:clickbank; sid:1001124; rev:1)
alert tcp any any -> any any (msg:"Cox"; appid:cox; sid:1001125; rev:1)
alert tcp any any -> any any (msg:"Mashable"; appid:mashable; sid:1001126; rev:1)
alert tcp any any -> any any (msg:"AccuWeather"; appid:accuweather; sid:1001127; rev:1)
alert tcp any any -> any any (msg:"Sprint"; appid:sprint; sid:1001128; rev:1)
alert tcp any any -> any any (msg:"Goodreads"; appid:goodreads; sid:1001129; rev:1)
alert tcp any any -> any any (msg:"LiveStrong.com"; appid:livestrong; sid:1001130; rev:1)
alert tcp any any -> any any (msg:"RealClearPolitics"; appid:realclearpolitics; sid:1001131; rev:1)
alert tcp any any -> any any (msg:"Manta"; appid:manta; sid:1001132; rev:1)
alert tcp any any -> any any (msg:"CNBC"; appid:cnbc; sid:1001133; rev:1)
alert tcp any any -> any any (msg:"Inbox.com"; appid:inbox; sid:1001134; rev:1)
alert tcp any any -> any any (msg:"Shutterfly"; appid:shutterfly; sid:1001135; rev:1)
alert tcp any any -> any any (msg:"Neteller"; appid:neteller; sid:1001136; rev:1)
alert tcp any any -> any any (msg:"T Mobile"; appid:t_mobile; sid:1001137; rev:1)
alert tcp any any -> any any (msg:"Walgreens"; appid:walgreens; sid:1001138; rev:1)
alert tcp any any -> any any (msg:"WorldstarHipHop"; appid:worldstarhiphop; sid:1001139; rev:1)
alert tcp any any -> any any (msg:"NPR"; appid:npr; sid:1001140; rev:1)
alert tcp any any -> any any (msg:"Kayak"; appid:kayak; sid:1001141; rev:1)
alert tcp any any -> any any (msg:"ToysRUs"; appid:toysrus; sid:1001142; rev:1)
alert tcp any any -> any any (msg:"Mail.Ru"; appid:mail.ru; sid:1001143; rev:1)
alert tcp any any -> any any (msg:"Sohu.com"; appid:sohu.com; sid:1001144; rev:1)
alert tcp any any -> any any (msg:"1&1 Internet"; appid:1n1_internet; sid:1001145; rev:1)
alert tcp any any -> any any (msg:"Ameba"; appid:ameba; sid:1001146; rev:1)
alert tcp any any -> any any (msg:"Avaya"; appid:avaya; sid:1001147; rev:1)
alert tcp any any -> any any (msg:"Snort.org"; appid:snort; sid:1001148; rev:1)
alert tcp any any -> any any (msg:"Disqus"; appid:disqus; sid:1001149; rev:1)
alert tcp any any -> any any (msg:"Infusionsoft"; appid:infusionsoft; sid:1001150; rev:1)
alert tcp any any -> any any (msg:"IMRWorldWide"; appid:imrworldwide; sid:1001151; rev:1)
alert tcp any any -> any any (msg:"Alisoft"; appid:alisoft; sid:1001152; rev:1)
alert tcp any any -> any any (msg:"Salesforce.com Live Agent"; appid:sales_liveagent; sid:1001153; rev:1)
alert tcp any any -> any any (msg:"Fab.com"; appid:fab.com; sid:1001154; rev:1)
alert tcp any any -> any any (msg:"Square Inc."; appid:square; sid:1001155; rev:1)
alert tcp any any -> any any (msg:"Java Update"; appid:java_update; sid:1001156; rev:1)
alert tcp any any -> any any (msg:"Xlite SIP Client"; appid:xlite_sip_client; sid:1001157; rev:1)
alert tcp any any -> any any (msg:"X-PRO SIP Client"; appid:x-pro_sip_client; sid:1001158; rev:1)
alert tcp any any -> any any (msg:"Nero SIP Client"; appid:nero_sip_client; sid:1001159; rev:1)
alert tcp any any -> any any (msg:"ClearSea SIP Client"; appid:clearsea_sip_client; sid:1001160; rev:1)
alert tcp any any -> any any (msg:"Dooble"; appid:dooble; sid:1001161; rev:1)
alert tcp any any -> any any (msg:"Lynx"; appid:lynx; sid:1001162; rev:1)
alert tcp any any -> any any (msg:"Epiphany"; appid:epiphany; sid:1001163; rev:1)
alert tcp any any -> any any (msg:"Chimera2"; appid:chimera2; sid:1001164; rev:1)
alert tcp any any -> any any (msg:"Links"; appid:links; sid:1001165; rev:1)
alert tcp any any -> any any (msg:"Midori"; appid:midori; sid:1001166; rev:1)
alert tcp any any -> any any (msg:"NetSurf"; appid:netsurf; sid:1001167; rev:1)
alert tcp any any -> any any (msg:"NetSurf"; appid:rekonq; sid:1001168; rev:1)
alert tcp any any -> any any (msg:"wApua"; appid:wapua; sid:1001169; rev:1)
alert tcp any any -> any any (msg:"Comodo Dragon"; appid:comodo_dragon; sid:1001170; rev:1)
alert tcp any any -> any any (msg:"PaleMoon"; appid:palemoon; sid:1001171; rev:1)
alert tcp any any -> any any (msg:"Wyzo"; appid:wyzo; sid:1001172; rev:1)
alert tcp any any -> any any (msg:"BioDigital Human"; appid:biodigital_human; sid:1001173; rev:1)
alert tcp any any -> any any (msg:"Apple Developer"; appid:apple_developer; sid:1001174; rev:1)
alert tcp any any -> any any (msg:"Geewa"; appid:geewa; sid:1001175; rev:1)
alert tcp any any -> any any (msg:"GoToMyPC"; appid:gotomypc; sid:1001176; rev:1)
alert tcp any any -> any any (msg:"King.com"; appid:king.com; sid:1001177; rev:1)
alert tcp any any -> any any (msg:"USPS"; appid:usps; sid:1001178; rev:1)
alert tcp any any -> any any (msg:"Xcode"; appid:xcode; sid:1001179; rev:1)
alert tcp any any -> any any (msg:"Siri"; appid:siri; sid:1001180; rev:1)
alert tcp any any -> any any (msg:"Bria"; appid:bria; sid:1001181; rev:1)
alert tcp any any -> any any (msg:"sipXecs"; appid:sipxecs; sid:1001182; rev:1)
alert tcp any any -> any any (msg:"Linphone"; appid:linphone; sid:1001183; rev:1)
alert tcp any any -> any any (msg:"OpenSIPS"; appid:opensips; sid:1001184; rev:1)
alert tcp any any -> any any (msg:"TextMe"; appid:textme; sid:1001185; rev:1)
alert tcp any any -> any any (msg:"FreeSWITCH"; appid:freeswitch; sid:1001186; rev:1)
alert tcp any any -> any any (msg:"Asterisk PBX"; appid:asterisk_pbx; sid:1001187; rev:1)
alert tcp any any -> any any (msg:"textPlus"; appid:textplus; sid:1001188; rev:1)
alert tcp any any -> any any (msg:"Cisco SIP Gateway"; appid:cisco_sip_gateway; sid:1001189; rev:1)
alert tcp any any -> any any (msg:"Nuance Voice Platform"; appid:nuance_voice_platform; sid:1001190; rev:1)
alert tcp any any -> any any (msg:"Shutterstock"; appid:shutterstock; sid:1001191; rev:1)
alert tcp any any -> any any (msg:"Aili"; appid:aili; sid:1001192; rev:1)
alert tcp any any -> any any (msg:"Yandex"; appid:yandex; sid:1001193; rev:1)
alert tcp any any -> any any (msg:"Adcash"; appid:adcash; sid:1001194; rev:1)
alert tcp any any -> any any (msg:"The Guardian"; appid:the_guardian; sid:1001195; rev:1)
alert tcp any any -> any any (msg:"Yieldmanager"; appid:yieldmanager; sid:1001196; rev:1)
alert tcp any any -> any any (msg:"The Telegraph"; appid:the_telegraph; sid:1001197; rev:1)
alert tcp any any -> any any (msg:"Livedoor"; appid:livedoor; sid:1001198; rev:1)
alert tcp any any -> any any (msg:"WarriorForum"; appid:warriorforum; sid:1001199; rev:1)
alert tcp any any -> any any (msg:"Indiatimes"; appid:indiatimes; sid:1001200; rev:1)
alert tcp any any -> any any (msg:"Rediff.com"; appid:rediff.com; sid:1001201; rev:1)
alert tcp any any -> any any (msg:"Spiegel Online"; appid:spiegel_online; sid:1001202; rev:1)
alert tcp any any -> any any (msg:"UOL"; appid:uol; sid:1001203; rev:1)
alert tcp any any -> any any (msg:"Jingdong (360buy.com)"; appid:jingdong; sid:1001204; rev:1)
alert tcp any any -> any any (msg:"The Xinhuanet"; appid:xinhuanet; sid:1001205; rev:1)
alert tcp any any -> any any (msg:"ShowMyPC"; appid:showmypc; sid:1001206; rev:1)
alert tcp any any -> any any (msg:"Airtime"; appid:airtime; sid:1001207; rev:1)
alert tcp any any -> any any (msg:"CSDN"; appid:csdn; sid:1001208; rev:1)
alert tcp any any -> any any (msg:"Taringa"; appid:taringa; sid:1001209; rev:1)
alert tcp any any -> any any (msg:"Aliexpress"; appid:aliexpress; sid:1001210; rev:1)
alert tcp any any -> any any (msg:"58 City"; appid:58_city; sid:1001211; rev:1)
alert tcp any any -> any any (msg:"LeTV"; appid:letv; sid:1001212; rev:1)
alert tcp any any -> any any (msg:"Tianya"; appid:tianya; sid:1001213; rev:1)
alert tcp any any -> any any (msg:"Rakuten"; appid:rakuten; sid:1001214; rev:1)
alert tcp any any -> any any (msg:"Snapchat"; appid:snapchat; sid:1001215; rev:1)
alert tcp any any -> any any (msg:"Snapchat"; appid:500px; sid:1001216; rev:1)
alert tcp any any -> any any (msg:"Airbnb"; appid:airbnb; sid:1001217; rev:1)
alert tcp any any -> any any (msg:"Urban Airship"; appid:urban_airship; sid:1001218; rev:1)
alert tcp any any -> any any (msg:"Akamai"; appid:akamai; sid:1001219; rev:1)
alert tcp any any -> any any (msg:"Loyalty Innovations"; appid:loyalty_innovations; sid:1001220; rev:1)
alert tcp any any -> any any (msg:"Avaya Live"; appid:avaya_live; sid:1001221; rev:1)
alert tcp any any -> any any (msg:"DirBuster"; appid:dirbuster; sid:1001222; rev:1)
alert tcp any any -> any any (msg:"YY"; appid:yy; sid:1001223; rev:1)
alert tcp any any -> any any (msg:"Dwolla"; appid:dwolla; sid:1001224; rev:1)
alert tcp any any -> any any (msg:"Google Remote Desktop"; appid:google_remote_desktop; sid:1001225; rev:1)
alert tcp any any -> any any (msg:"LINE"; appid:line; sid:1001226; rev:1)
alert tcp any any -> any any (msg:"Fancy"; appid:fancy; sid:1001227; rev:1)
alert tcp any any -> any any (msg:"GitHub"; appid:github; sid:1001228; rev:1)
alert tcp any any -> any any (msg:"Trend Micro"; appid:trend_micro; sid:1001229; rev:1)
alert tcp any any -> any any (msg:"Ogg"; appid:ogg; sid:1001230; rev:1)
alert tcp any any -> any any (msg:"WebM"; appid:webm; sid:1001231; rev:1)
alert tcp any any -> any any (msg:"QualysGuard"; appid:qualysguard; sid:1001232; rev:1)
alert tcp any any -> any any (msg:"Flexera Software"; appid:flexera_soft; sid:1001233; rev:1)
alert tcp any any -> any any (msg:"OsiriX"; appid:osirix; sid:1001234; rev:1)
alert tcp any any -> any any (msg:"PACS"; appid:pacs; sid:1001235; rev:1)
alert tcp any any -> any any (msg:"DICOM"; appid:dicom; sid:1001236; rev:1)
alert tcp any any -> any any (msg:"Mac App Store"; appid:mac_app_store; sid:1001237; rev:1)
alert tcp any any -> any any (msg:"AirPlay"; appid:airplay; sid:1001238; rev:1)
alert tcp any any -> any any (msg:"AirTunes"; appid:airtunes; sid:1001239; rev:1)
alert tcp any any -> any any (msg:"Apple TV"; appid:apple_tv; sid:1001240; rev:1)
alert tcp any any -> any any (msg:"Java"; appid:java; sid:1001241; rev:1)
alert tcp any any -> any any (msg:"SOUNDROP"; appid:soundrop; sid:1001242; rev:1)
alert tcp any any -> any any (msg:"Android Client"; appid:android_client; sid:1001243; rev:1)
alert tcp any any -> any any (msg:"Vine"; appid:vine; sid:1001244; rev:1)
alert tcp any any -> any any (msg:"MyLife"; appid:mylife; sid:1001245; rev:1)
alert tcp any any -> any any (msg:"Ning"; appid:ning; sid:1001246; rev:1)
alert tcp any any -> any any (msg:"Gravatar"; appid:gravatar; sid:1001247; rev:1)
alert tcp any any -> any any (msg:"Kickstarter"; appid:kickstarter; sid:1001248; rev:1)
alert tcp any any -> any any (msg:"Linux Mint"; appid:linux_mint; sid:1001249; rev:1)
alert tcp any any -> any any (msg:"The Washington Post"; appid:washpost; sid:1001250; rev:1)
alert tcp any any -> any any (msg:"Pandora Audio"; appid:pandora_audio; sid:1001251; rev:1)
alert tcp any any -> any any (msg:"Elinks"; appid:elinks; sid:1001252; rev:1)
alert tcp any any -> any any (msg:"MDNS"; appid:mdns; sid:1001253; rev:1)
alert tcp any any -> any any (msg:"VLC Media Player"; appid:vlc_media_play; sid:1001254; rev:1)
alert tcp any any -> any any (msg:"Raptr"; appid:raptr; sid:1001255; rev:1)
alert tcp any any -> any any (msg:"UPnP"; appid:upnp; sid:1001256; rev:1)
alert tcp any any -> any any (msg:"Silk"; appid:silk; sid:1001257; rev:1)
alert tcp any any -> any any (msg:"PS3 web browser"; appid:ps3_web_browser; sid:1001258; rev:1)
alert tcp any any -> any any (msg:"PS3 Messenger"; appid:ps3_messenger; sid:1001259; rev:1)
alert tcp any any -> any any (msg:"Playstation Store"; appid:ps_store; sid:1001260; rev:1)
alert tcp any any -> any any (msg:"PS3 Downloads"; appid:ps3_downloads; sid:1001261; rev:1)
alert tcp any any -> any any (msg:"PS3 Updater"; appid:ps3_updater; sid:1001262; rev:1)
alert tcp any any -> any any (msg:"PS3 Home Client"; appid:ps3_home_client; sid:1001263; rev:1)
alert tcp any any -> any any (msg:"Nokia"; appid:nokia; sid:1001264; rev:1)
alert tcp any any -> any any (msg:"Nokia Music"; appid:nokia_music; sid:1001265; rev:1)
alert tcp any any -> any any (msg:"Nokia Store"; appid:nokia_store; sid:1001266; rev:1)
alert tcp any any -> any any (msg:"PBS"; appid:pbs; sid:1001267; rev:1)
alert tcp any any -> any any (msg:"TRUSTe"; appid:truste; sid:1001268; rev:1)
alert tcp any any -> any any (msg:"DoubleVerify"; appid:doubleverify; sid:1001269; rev:1)
alert tcp any any -> any any (msg:"WSDD"; appid:wsdd; sid:1001270; rev:1)
alert tcp any any -> any any (msg:"FDSSDP"; appid:fdssdp; sid:1001271; rev:1)
alert tcp any any -> any any (msg:"Exchange"; appid:exchange; sid:1001272; rev:1)
alert tcp any any -> any any (msg:"Bizrate"; appid:bizrate; sid:1001273; rev:1)
alert tcp any any -> any any (msg:"People Of Walmart"; appid:people_walmart; sid:1001274; rev:1)
alert tcp any any -> any any (msg:"Cute Overload"; appid:cute_overload; sid:1001275; rev:1)
alert tcp any any -> any any (msg:"Cheezburger"; appid:cheezburger; sid:1001276; rev:1)
alert tcp any any -> any any (msg:"theCHIVE"; appid:thechive; sid:1001277; rev:1)
alert tcp any any -> any any (msg:"TruuConfessions"; appid:truuconfessions; sid:1001278; rev:1)
alert tcp any any -> any any (msg:"ZergNet"; appid:zergnet; sid:1001279; rev:1)
alert tcp any any -> any any (msg:"WhereCoolThingsHappen"; appid:wherecoolthingshappen; sid:1001280; rev:1)
alert tcp any any -> any any (msg:"H&R Block"; appid:hr_block; sid:1001281; rev:1)
alert tcp any any -> any any (msg:"Constant Contact"; appid:const_contact; sid:1001282; rev:1)
alert tcp any any -> any any (msg:"Pivotal Tracker"; appid:pivotal_tracker; sid:1001283; rev:1)
alert tcp any any -> any any (msg:"Tempo"; appid:tempo; sid:1001284; rev:1)
alert tcp any any -> any any (msg:"Podio"; appid:podio; sid:1001285; rev:1)
alert tcp any any -> any any (msg:"LivePerson"; appid:liveperson; sid:1001286; rev:1)
alert tcp any any -> any any (msg:"Mention"; appid:mention; sid:1001287; rev:1)
alert tcp any any -> any any (msg:"Feedly"; appid:feedly; sid:1001288; rev:1)
alert tcp any any -> any any (msg:"IPFIX"; appid:ipfix; sid:1001289; rev:1)
alert tcp any any -> any any (msg:"Mailbox"; appid:mailbox; sid:1001290; rev:1)
alert tcp any any -> any any (msg:"Minecraft"; appid:minecraft; sid:1001291; rev:1)
alert tcp any any -> any any (msg:"Rotten Tomatoes"; appid:rotten_tomatoes; sid:1001292; rev:1)
alert tcp any any -> any any (msg:"Amazon Ads System"; appid:amazon_ad_sys; sid:1001293; rev:1)
alert tcp any any -> any any (msg:"MTv"; appid:mtv; sid:1001294; rev:1)
alert tcp any any -> any any (msg:"Tightrope Interactive"; appid:tightrope; sid:1001295; rev:1)
alert tcp any any -> any any (msg:"Glympse"; appid:glympse; sid:1001296; rev:1)
alert tcp any any -> any any (msg:"Honeywell Control Station/NIF Server"; appid:honeywell; sid:1001297; rev:1)
alert tcp any any -> any any (msg:"TuneIn"; appid:tunein; sid:1001298; rev:1)
alert tcp any any -> any any (msg:"Honeywell Experion DSA Server Monitor"; appid:experion; sid:1001299; rev:1)
alert tcp any any -> any any (msg:"Backupgrid"; appid:backupgrid; sid:1001300; rev:1)
alert tcp any any -> any any (msg:"Carbonite"; appid:carbonite; sid:1001301; rev:1)
alert tcp any any -> any any (msg:"iBackup"; appid:ibackup; sid:1001302; rev:1)
alert tcp any any -> any any (msg:"JustCloud"; appid:justcloud; sid:1001303; rev:1)
alert tcp any any -> any any (msg:"MyPCBackup"; appid:mypcbackup; sid:1001304; rev:1)
alert tcp any any -> any any (msg:"SOS Online Backup"; appid:sos_online_backup; sid:1001305; rev:1)
alert tcp any any -> any any (msg:"SugarSync"; appid:sugarsync; sid:1001306; rev:1)
alert tcp any any -> any any (msg:"ZipCloud"; appid:zipcloud; sid:1001307; rev:1)
alert tcp any any -> any any (msg:"PubNub"; appid:pubnub; sid:1001308; rev:1)
alert tcp any any -> any any (msg:"FiOS TV"; appid:fios_tv; sid:1001309; rev:1)
alert tcp any any -> any any (msg:"Vdio"; appid:vdio; sid:1001310; rev:1)
alert tcp any any -> any any (msg:"Redbox"; appid:redbox; sid:1001311; rev:1)
alert tcp any any -> any any (msg:"Google Fiber"; appid:google_fiber; sid:1001312; rev:1)
alert tcp any any -> any any (msg:"NBA"; appid:nba; sid:1001313; rev:1)
alert tcp any any -> any any (msg:"NBC"; appid:nbc; sid:1001314; rev:1)
alert tcp any any -> any any (msg:"RedOrbit"; appid:redorbit; sid:1001315; rev:1)
alert tcp any any -> any any (msg:"Space.com"; appid:space; sid:1001316; rev:1)
alert tcp any any -> any any (msg:"SockShare"; appid:sockshare; sid:1001317; rev:1)
alert tcp any any -> any any (msg:"BitGravity"; appid:bitgravity; sid:1001318; rev:1)
alert tcp any any -> any any (msg:"Zmags"; appid:zmags; sid:1001319; rev:1)
alert tcp any any -> any any (msg:"GNOME"; appid:gnome; sid:1001320; rev:1)
alert tcp any any -> any any (msg:"ESTsoft"; appid:estsoft; sid:1001321; rev:1)
alert tcp any any -> any any (msg:"Cabal Online"; appid:cabal_online; sid:1001322; rev:1)
alert tcp any any -> any any (msg:"ALTools"; appid:altools; sid:1001323; rev:1)
alert tcp any any -> any any (msg:"Slate Magazine"; appid:slate_magazine; sid:1001324; rev:1)
alert tcp any any -> any any (msg:"I Waste So Much Time"; appid:i_waste_so_much_time; sid:1001325; rev:1)
alert tcp any any -> any any (msg:"Biography.com"; appid:biography; sid:1001326; rev:1)
alert tcp any any -> any any (msg:"Ubuntu"; appid:ubuntu; sid:1001327; rev:1)
alert tcp any any -> any any (msg:"Comedy Central"; appid:comedy_central; sid:1001328; rev:1)
alert tcp any any -> any any (msg:"Wired.com"; appid:wired; sid:1001329; rev:1)
alert tcp any any -> any any (msg:"E! Online"; appid:e_online; sid:1001330; rev:1)
alert tcp any any -> any any (msg:"NHL.com"; appid:nhl.com; sid:1001331; rev:1)
alert tcp any any -> any any (msg:"Presto"; appid:presto; sid:1001332; rev:1)
alert tcp any any -> any any (msg:"MacPorts"; appid:macports; sid:1001333; rev:1)
alert tcp any any -> any any (msg:"Philips Hue"; appid:philips_hue; sid:1001334; rev:1)
alert tcp any any -> any any (msg:"Baiduspider"; appid:baiduspider; sid:1001335; rev:1)
alert tcp any any -> any any (msg:"K9 Web Protection"; appid:k8_web_protect; sid:1001336; rev:1)
alert tcp any any -> any any (msg:"Bing Bar"; appid:bing_bar; sid:1001337; rev:1)
alert tcp any any -> any any (msg:"TopTenREVIEWS"; appid:toptenreviews; sid:1001338; rev:1)
alert tcp any any -> any any (msg:"Adweek"; appid:adweek; sid:1001339; rev:1)
alert tcp any any -> any any (msg:"The Week Magazine"; appid:the_week; sid:1001340; rev:1)
alert tcp any any -> any any (msg:"Brightcove"; appid:brightcove; sid:1001341; rev:1)
alert tcp any any -> any any (msg:"Newser"; appid:newser; sid:1001342; rev:1)
alert tcp any any -> any any (msg:"Simpli.fi"; appid:simpli.fi; sid:1001343; rev:1)
alert tcp any any -> any any (msg:"Google Code project hosting"; appid:google_code; sid:1001344; rev:1)
alert tcp any any -> any any (msg:"Windows Help client"; appid:win_help_client; sid:1001345; rev:1)
alert tcp any any -> any any (msg:"Roku"; appid:roku; sid:1001346; rev:1)
alert tcp any any -> any any (msg:"TURN Channel"; appid:turn; sid:1001347; rev:1)
alert tcp any any -> any any (msg:"Splunk"; appid:splunk; sid:1001348; rev:1)
alert tcp any any -> any any (msg:"Atlassian"; appid:atlassian; sid:1001349; rev:1)
alert tcp any any -> any any (msg:"Prezi"; appid:prezi; sid:1001350; rev:1)
alert tcp any any -> any any (msg:"IFTTT"; appid:ifttt; sid:1001351; rev:1)
alert tcp any any -> any any (msg:"OPC-UA"; appid:opcua; sid:1001352; rev:1)
alert tcp any any -> any any (msg:"NetWorker"; appid:networker; sid:1001353; rev:1)
alert tcp any any -> any any (msg:"NetWorker Data Setup"; appid:network_setup; sid:1001354; rev:1)
alert tcp any any -> any any (msg:"Apple iForgot"; appid:apple_iforgot; sid:1001355; rev:1)
alert tcp any any -> any any (msg:"JBoss Remoting"; appid:jboss_remoting; sid:1001356; rev:1)
alert tcp any any -> any any (msg:"Fink"; appid:fink; sid:1001357; rev:1)
alert tcp any any -> any any (msg:"Photo Stream"; appid:photo_stream; sid:1001358; rev:1)
alert tcp any any -> any any (msg:"FOX"; appid:fox; sid:1001359; rev:1)
alert tcp any any -> any any (msg:"Washington Times"; appid:washtimes; sid:1001360; rev:1)
alert tcp any any -> any any (msg:"NextBus"; appid:nextbus; sid:1001361; rev:1)
alert tcp any any -> any any (msg:"OpenBSD"; appid:openbsd; sid:1001362; rev:1)
alert tcp any any -> any any (msg:"Associated Press"; appid:assoc_press; sid:1001363; rev:1)
alert tcp any any -> any any (msg:"WTOP"; appid:wtop; sid:1001364; rev:1)
alert tcp any any -> any any (msg:"OpenSUSE"; appid:opensuse; sid:1001365; rev:1)
alert tcp any any -> any any (msg:"Turner Broadcasting System"; appid:turner_broadcst; sid:1001366; rev:1)
alert tcp any any -> any any (msg:"NCAA"; appid:ncaa; sid:1001367; rev:1)
alert tcp any any -> any any (msg:"DSW"; appid:dsw; sid:1001368; rev:1)
alert tcp any any -> any any (msg:"Po.st"; appid:po.st; sid:1001369; rev:1)
alert tcp any any -> any any (msg:"CheapStuff"; appid:cheapstuff; sid:1001370; rev:1)
alert tcp any any -> any any (msg:"FreeStreams"; appid:freestreams; sid:1001371; rev:1)
alert tcp any any -> any any (msg:"Clear Channel"; appid:clear_channel; sid:1001372; rev:1)
alert tcp any any -> any any (msg:"GOLF.com"; appid:golf; sid:1001373; rev:1)
alert tcp any any -> any any (msg:"BoldChat"; appid:boldchat; sid:1001374; rev:1)
alert tcp any any -> any any (msg:"Intermarkets"; appid:intermarkets; sid:1001375; rev:1)
alert tcp any any -> any any (msg:"Woopra"; appid:woopra; sid:1001376; rev:1)
alert tcp any any -> any any (msg:"OCLC"; appid:oclc; sid:1001377; rev:1)
alert tcp any any -> any any (msg:"Chosun"; appid:chosun; sid:1001378; rev:1)
alert tcp any any -> any any (msg:"Ooyala"; appid:ooyala; sid:1001379; rev:1)
alert tcp any any -> any any (msg:"iTunes U"; appid:itunes_u; sid:1001380; rev:1)
alert tcp any any -> any any (msg:"C-SPAN"; appid:c-span; sid:1001381; rev:1)
alert tcp any any -> any any (msg:"Game Front"; appid:game_front; sid:1001382; rev:1)
alert tcp any any -> any any (msg:"BitCoin"; appid:bitcoin; sid:1001383; rev:1)
alert tcp any any -> any any (msg:"LiteCoin"; appid:litecoin; sid:1001384; rev:1)
alert tcp any any -> any any (msg:"Bitcoin Forum"; appid:bitcoin_forum; sid:1001385; rev:1)
alert tcp any any -> any any (msg:"Bitcoin Forum"; appid:lynda.com; sid:1001386; rev:1)
alert tcp any any -> any any (msg:"IDXRad"; appid:idxrad; sid:1001387; rev:1)
alert tcp any any -> any any (msg:"PScribe"; appid:pscribe; sid:1001388; rev:1)
alert tcp any any -> any any (msg:"Sunquest"; appid:sunquest; sid:1001389; rev:1)
alert tcp any any -> any any (msg:"Medipac"; appid:medipac; sid:1001390; rev:1)
alert tcp any any -> any any (msg:"Letterpress"; appid:letterpress; sid:1001391; rev:1)
alert tcp any any -> any any (msg:"Game Center"; appid:game_center; sid:1001392; rev:1)
alert tcp any any -> any any (msg:"FriendFinder"; appid:friendfinder; sid:1001393; rev:1)
alert tcp any any -> any any (msg:"Audible.com"; appid:audible; sid:1001394; rev:1)
alert tcp any any -> any any (msg:"Entertainment Weekly"; appid:entert_weekly; sid:1001395; rev:1)
alert tcp any any -> any any (msg:"Epic"; appid:epic; sid:1001396; rev:1)
alert tcp any any -> any any (msg:"UPMC"; appid:upmc; sid:1001397; rev:1)
alert tcp any any -> any any (msg:"Speedtest"; appid:speedtest; sid:1001398; rev:1)
alert tcp any any -> any any (msg:"Boxnet Upload SSL"; appid:boxnet_upload; sid:1001399; rev:1)
alert tcp any any -> any any (msg:"Flickr Upload"; appid:flickr_upload; sid:1001400; rev:1)
alert tcp any any -> any any (msg:"Scribd Upload"; appid:scribd_upload; sid:1001401; rev:1)
alert tcp any any -> any any (msg:"Youtube Upload"; appid:youtube_upload; sid:1001402; rev:1)
alert tcp any any -> any any (msg:"Voxer"; appid:voxer; sid:1001403; rev:1)
alert tcp any any -> any any (msg:"Microsoft Azure"; appid:microsoft_azure; sid:1001404; rev:1)
alert tcp any any -> any any (msg:"Starbucks"; appid:starbucks; sid:1001405; rev:1)
alert tcp any any -> any any (msg:"iTunes Music"; appid:itunes_music; sid:1001406; rev:1)
alert tcp any any -> any any (msg:"Adblade"; appid:adblade; sid:1001407; rev:1)
alert tcp any any -> any any (msg:"Blackberry sites"; appid:blackberry_sites; sid:1001408; rev:1)
alert tcp any any -> any any (msg:"Djpod"; appid:djpod; sid:1001409; rev:1)
alert tcp any any -> any any (msg:"Microsoft download"; appid:ms_download; sid:1001410; rev:1)
alert tcp any any -> any any (msg:"Microsoft AutoUpdate"; appid:ms_autoupdate; sid:1001411; rev:1)
alert tcp any any -> any any (msg:"MyOnlineArcade"; appid:myonlinearcade; sid:1001412; rev:1)
alert tcp any any -> any any (msg:"SmugMug"; appid:smugmug; sid:1001413; rev:1)
alert tcp any any -> any any (msg:"USAA"; appid:usaa; sid:1001414; rev:1)
alert tcp any any -> any any (msg:"USAA"; appid:wimp.com; sid:1001415; rev:1)
alert tcp any any -> any any (msg:"Zendesk"; appid:zendesk; sid:1001416; rev:1)
alert tcp any any -> any any (msg:"Show My Weather"; appid:show_my_weather; sid:1001417; rev:1)
alert tcp any any -> any any (msg:"MobiTV"; appid:mobitv; sid:1001418; rev:1)
alert tcp any any -> any any (msg:"TV Guide"; appid:tv_guide; sid:1001419; rev:1)
alert tcp any any -> any any (msg:"iFunny"; appid:ifunny; sid:1001420; rev:1)
alert tcp any any -> any any (msg:"Telenav"; appid:telenav; sid:1001421; rev:1)
alert tcp any any -> any any (msg:"Vlingo"; appid:vlingo; sid:1001422; rev:1)
alert tcp any any -> any any (msg:"Media Hub"; appid:media_hub; sid:1001423; rev:1)
alert tcp any any -> any any (msg:"CheapOAir"; appid:cheapoair; sid:1001424; rev:1)
alert tcp any any -> any any (msg:"Crunchyroll"; appid:crunchyroll; sid:1001425; rev:1)
alert tcp any any -> any any (msg:"Eventbrite"; appid:eventbrite; sid:1001426; rev:1)
alert tcp any any -> any any (msg:"J.P. Morgan"; appid:jpmorgan; sid:1001427; rev:1)
alert tcp any any -> any any (msg:"GoBank"; appid:gobank; sid:1001428; rev:1)
alert tcp any any -> any any (msg:"Intel"; appid:intel; sid:1001429; rev:1)
alert tcp any any -> any any (msg:"AMD"; appid:amd; sid:1001430; rev:1)
alert tcp any any -> any any (msg:"Asus"; appid:asus; sid:1001431; rev:1)
alert tcp any any -> any any (msg:"Acer"; appid:acer; sid:1001432; rev:1)
alert tcp any any -> any any (msg:"Gateway"; appid:gateway; sid:1001433; rev:1)
alert tcp any any -> any any (msg:"Toshiba"; appid:toshiba; sid:1001434; rev:1)
alert tcp any any -> any any (msg:"Motorola"; appid:motorola; sid:1001435; rev:1)
alert tcp any any -> any any (msg:"Nvidia"; appid:nvidia; sid:1001436; rev:1)
alert tcp any any -> any any (msg:"Progressive"; appid:progressive; sid:1001437; rev:1)
alert tcp any any -> any any (msg:"State Farm"; appid:state_farm; sid:1001438; rev:1)
alert tcp any any -> any any (msg:"Allstate"; appid:allstate; sid:1001439; rev:1)
alert tcp any any -> any any (msg:"Geico"; appid:geico; sid:1001440; rev:1)
alert tcp any any -> any any (msg:"Liberty Mutual"; appid:liberty_mutual; sid:1001441; rev:1)
alert tcp any any -> any any (msg:"Ensighten"; appid:ensighten; sid:1001442; rev:1)
alert tcp any any -> any any (msg:"Maxymiser"; appid:maxymiser; sid:1001443; rev:1)
alert tcp any any -> any any (msg:"Jetsetz"; appid:jetsetz; sid:1001444; rev:1)
alert tcp any any -> any any (msg:"StudentUniverse"; appid:studentuniverse; sid:1001445; rev:1)
alert tcp any any -> any any (msg:"PerfectIBE"; appid:perfectibe; sid:1001446; rev:1)
alert tcp any any -> any any (msg:"Funny or Die"; appid:funny_or_die; sid:1001447; rev:1)
alert tcp any any -> any any (msg:"CollegeHumor"; appid:collegehumor; sid:1001448; rev:1)
alert tcp any any -> any any (msg:"Zombo.com"; appid:zombo; sid:1001449; rev:1)
alert tcp any any -> any any (msg:"Viki"; appid:viki; sid:1001450; rev:1)
alert tcp any any -> any any (msg:"PNC Bank"; appid:pnc_bank; sid:1001451; rev:1)
alert tcp any any -> any any (msg:"Red Hat"; appid:red_hat; sid:1001452; rev:1)
alert tcp any any -> any any (msg:"United Airlines"; appid:united_airlines; sid:1001453; rev:1)
alert tcp any any -> any any (msg:"TextNow"; appid:textnow; sid:1001454; rev:1)
alert tcp any any -> any any (msg:"FedEx"; appid:fedex; sid:1001455; rev:1)
alert tcp any any -> any any (msg:"American Airlines"; appid:american_airlines; sid:1001456; rev:1)
alert tcp any any -> any any (msg:"Nuance"; appid:nuance; sid:1001457; rev:1)
alert tcp any any -> any any (msg:"Al Jazeera"; appid:al_jazeera; sid:1001458; rev:1)
alert tcp any any -> any any (msg:"Wimbledon"; appid:wimbledon; sid:1001459; rev:1)
alert tcp any any -> any any (msg:"MLive"; appid:mlive; sid:1001460; rev:1)
alert tcp any any -> any any (msg:"Times Union"; appid:times_union; sid:1001461; rev:1)
alert tcp any any -> any any (msg:"beRecruited"; appid:berecruited; sid:1001462; rev:1)
alert tcp any any -> any any (msg:"Bitbucket"; appid:bitbucket; sid:1001463; rev:1)
alert tcp any any -> any any (msg:"Detroit Free Press"; appid:detroit_press; sid:1001464; rev:1)
alert tcp any any -> any any (msg:"Michigan Radio"; appid:michigan_radio; sid:1001465; rev:1)
alert tcp any any -> any any (msg:"De Telegraaf"; appid:de_telegraaf; sid:1001466; rev:1)
alert tcp any any -> any any (msg:"The Daily Beast"; appid:daily_beast; sid:1001467; rev:1)
alert tcp any any -> any any (msg:"The Free Dictionary"; appid:free_dict; sid:1001468; rev:1)
alert tcp any any -> any any (msg:"The Onion"; appid:the_onion; sid:1001469; rev:1)
alert tcp any any -> any any (msg:"WeatherLink"; appid:weatherlink; sid:1001470; rev:1)
alert tcp any any -> any any (msg:"Yahoo! Calendar"; appid:yahoo_calendar; sid:1001471; rev:1)
alert tcp any any -> any any (msg:"GVFS"; appid:gvfs; sid:1001472; rev:1)
alert tcp any any -> any any (msg:"Yammer"; appid:yammer; sid:1001473; rev:1)
alert tcp any any -> any any (msg:"Yammer"; appid:ksfetch; sid:1001474; rev:1)
alert tcp any any -> any any (msg:"Google Update"; appid:google_update; sid:1001475; rev:1)
alert tcp any any -> any any (msg:"Googlebot Image Search"; appid:googlebot_image_search; sid:1001476; rev:1)
alert tcp any any -> any any (msg:"Abonti"; appid:abonti; sid:1001477; rev:1)
alert tcp any any -> any any (msg:"Zapier"; appid:zapier; sid:1001478; rev:1)
alert tcp any any -> any any (msg:"Collider"; appid:collider; sid:1001479; rev:1)
alert tcp any any -> any any (msg:"WordReference.com"; appid:wordreference; sid:1001480; rev:1)
alert tcp any any -> any any (msg:"Microsoft Word"; appid:msoffice_word; sid:1001481; rev:1)
alert tcp any any -> any any (msg:"Microsoft Powerpoint"; appid:msoffice_power; sid:1001482; rev:1)
alert tcp any any -> any any (msg:"Yandex Bot"; appid:yandex_bot; sid:1001483; rev:1)
alert tcp any any -> any any (msg:"MJ12 Bot"; appid:mj12_bot; sid:1001484; rev:1)
alert tcp any any -> any any (msg:"Microsoft CryptoAPI"; appid:ms_cryptoapi; sid:1001485; rev:1)
alert tcp any any -> any any (msg:"FrostWire"; appid:frostwire; sid:1001486; rev:1)
alert tcp any any -> any any (msg:"Media Stream Daemon"; appid:media_stream; sid:1001487; rev:1)
alert tcp any any -> any any (msg:"OCSPD"; appid:ocspd; sid:1001488; rev:1)
alert tcp any any -> any any (msg:"5by5 Radio"; appid:5by5_radio; sid:1001489; rev:1)
alert tcp any any -> any any (msg:"Acoon.de"; appid:acoon.de; sid:1001490; rev:1)
alert tcp any any -> any any (msg:"Anipang"; appid:anipang; sid:1001491; rev:1)
alert tcp any any -> any any (msg:"Apple PubSub"; appid:apple_pubsub; sid:1001492; rev:1)
alert tcp any any -> any any (msg:"ArcGIS"; appid:arcgis; sid:1001493; rev:1)
alert tcp any any -> any any (msg:"Boingo"; appid:boingo; sid:1001494; rev:1)
alert tcp any any -> any any (msg:"Easou Spider"; appid:easou_spider; sid:1001495; rev:1)
alert tcp any any -> any any (msg:"FeedBurner"; appid:feedburner; sid:1001496; rev:1)
alert tcp any any -> any any (msg:"Feedly Fetcher"; appid:feedly_fetcher; sid:1001497; rev:1)
alert tcp any any -> any any (msg:"Genieo Web Filter"; appid:genieo_filter; sid:1001498; rev:1)
alert tcp any any -> any any (msg:"PHP"; appid:php; sid:1001499; rev:1)
alert tcp any any -> any any (msg:"Apple Syndication"; appid:apple_syndicate; sid:1001500; rev:1)
alert tcp any any -> any any (msg:"Android Download Manager"; appid:android_dnld; sid:1001501; rev:1)
alert tcp any any -> any any (msg:"Sony"; appid:sony; sid:1001502; rev:1)
alert tcp any any -> any any (msg:"WeTransfer"; appid:wetransfer; sid:1001503; rev:1)
alert tcp any any -> any any (msg:"SpeedRunsLive"; appid:speedrunslive; sid:1001504; rev:1)
alert tcp any any -> any any (msg:"WDT"; appid:wdt; sid:1001505; rev:1)
alert tcp any any -> any any (msg:"Twitterrific"; appid:twitterrific; sid:1001506; rev:1)
alert tcp any any -> any any (msg:"The Seattle Times"; appid:seattle_times; sid:1001507; rev:1)
alert tcp any any -> any any (msg:"Oracle sites"; appid:oracle_sites; sid:1001508; rev:1)
alert tcp any any -> any any (msg:"Okta"; appid:okta; sid:1001509; rev:1)
alert tcp any any -> any any (msg:"Nike"; appid:nike; sid:1001510; rev:1)
alert tcp any any -> any any (msg:"Libsyn"; appid:libsyn; sid:1001511; rev:1)
alert tcp any any -> any any (msg:"Investopedia"; appid:investopedia; sid:1001512; rev:1)
alert tcp any any -> any any (msg:"The Hollywood Reporter"; appid:hollywood_reprt; sid:1001513; rev:1)
alert tcp any any -> any any (msg:"John's Background Switcher"; appid:johns_switcher; sid:1001514; rev:1)
alert tcp any any -> any any (msg:"AppleCoreMedia"; appid:applecoremedia; sid:1001515; rev:1)
alert tcp any any -> any any (msg:"FFFFOUND!"; appid:ffffound; sid:1001516; rev:1)
alert tcp any any -> any any (msg:"CNET TV"; appid:cnet_tv; sid:1001517; rev:1)
alert tcp any any -> any any (msg:"Fifth Third Bank"; appid:fifth_third_bank; sid:1001518; rev:1)
alert tcp any any -> any any (msg:"Android Music"; appid:android_music; sid:1001519; rev:1)
alert tcp any any -> any any (msg:"Adap.tv"; appid:adap.tv; sid:1001520; rev:1)
alert tcp any any -> any any (msg:"Feedfetcher"; appid:feedfetcher; sid:1001521; rev:1)
alert tcp any any -> any any (msg:"GSA Crawler"; appid:gsa_crawler; sid:1001522; rev:1)
alert tcp any any -> any any (msg:"Kraken"; appid:kraken; sid:1001523; rev:1)
alert tcp any any -> any any (msg:"MagPie"; appid:magpie; sid:1001524; rev:1)
alert tcp any any -> any any (msg:"Sogou web spider"; appid:sogou_spider; sid:1001525; rev:1)
alert tcp any any -> any any (msg:"Voilabot"; appid:voilabot; sid:1001526; rev:1)
alert tcp any any -> any any (msg:"Drugs.com"; appid:drugs; sid:1001527; rev:1)
alert tcp any any -> any any (msg:"Campfire"; appid:campfire; sid:1001528; rev:1)
alert tcp any any -> any any (msg:"AudioDocumentary.org"; appid:audiodocument; sid:1001529; rev:1)
alert tcp any any -> any any (msg:"Quick Look"; appid:quick_look; sid:1001530; rev:1)
alert tcp any any -> any any (msg:"NVIDIA Update"; appid:nvidia_update; sid:1001531; rev:1)
alert tcp any any -> any any (msg:"Connexion client"; appid:connexion_clnt; sid:1001532; rev:1)
alert tcp any any -> any any (msg:"PS3 Community Agent"; appid:ps3_comm_agent; sid:1001533; rev:1)
alert tcp any any -> any any (msg:"PSP Activity Agent"; appid:ps3_actv_agent; sid:1001534; rev:1)
alert tcp any any -> any any (msg:"PSP Community Agent"; appid:psp_comm_agent; sid:1001535; rev:1)
alert tcp any any -> any any (msg:"MS Office Existence Discovery"; appid:msoffice_exist; sid:1001536; rev:1)
alert tcp any any -> any any (msg:"MS Office Protocol Discovery"; appid:msoffice_proto; sid:1001537; rev:1)
alert tcp any any -> any any (msg:"Rainmeter WebParser"; appid:rainmeter; sid:1001538; rev:1)
alert tcp any any -> any any (msg:"reCAPTCHA"; appid:recaptcha; sid:1001539; rev:1)
alert tcp any any -> any any (msg:"reCAPTCHA"; appid:simple-get; sid:1001540; rev:1)
alert tcp any any -> any any (msg:"Wood TV8"; appid:wood_tv8; sid:1001541; rev:1)
alert tcp any any -> any any (msg:"Malware Defense System"; appid:malware_defense_system; sid:1001542; rev:1)
alert tcp any any -> any any (msg:"Microsoft Excel"; appid:msoffice_excel; sid:1001543; rev:1)
alert tcp any any -> any any (msg:"Microsoft NCSI"; appid:ms_ncsi; sid:1001544; rev:1)
alert tcp any any -> any any (msg:"Microsoft WNS"; appid:ms_wns; sid:1001545; rev:1)
alert tcp any any -> any any (msg:"Moodlebot"; appid:moodlebot; sid:1001546; rev:1)
alert tcp any any -> any any (msg:"Windows Phone Browser"; appid:win_phone_browz; sid:1001547; rev:1)
alert tcp any any -> any any (msg:"XProtectUpdater"; appid:xprotectupdater; sid:1001548; rev:1)
alert tcp any any -> any any (msg:"Xenu Link Sleuth"; appid:xenu_link; sid:1001549; rev:1)
alert tcp any any -> any any (msg:"uTorrent"; appid:utorrent; sid:1001550; rev:1)
alert tcp any any -> any any (msg:"URLAppendBot"; appid:urlappendbot; sid:1001551; rev:1)
alert tcp any any -> any any (msg:"Tiny Tiny RSS"; appid:tiny_tiny_rss; sid:1001552; rev:1)
alert tcp any any -> any any (msg:"Tinder"; appid:tinder; sid:1001553; rev:1)
alert tcp any any -> any any (msg:"Sage"; appid:sage; sid:1001554; rev:1)
alert tcp any any -> any any (msg:"Radian6 CommentReader"; appid:radian6_commentreader; sid:1001555; rev:1)
alert tcp any any -> any any (msg:"Powermarks"; appid:powermarks; sid:1001556; rev:1)
alert tcp any any -> any any (msg:"PDF Expert"; appid:pdf_expert; sid:1001557; rev:1)
alert tcp any any -> any any (msg:"Google PageSpeed"; appid:google_pagespeed; sid:1001558; rev:1)
alert tcp any any -> any any (msg:"Owlinbot"; appid:owlinbot; sid:1001559; rev:1)
alert tcp any any -> any any (msg:"Yeti Bot"; appid:yeti_bot; sid:1001560; rev:1)
alert tcp any any -> any any (msg:"TPKT"; appid:tpkt; sid:1001561; rev:1)
alert tcp any any -> any any (msg:"ISO MMS"; appid:isomms; sid:1001562; rev:1)
alert tcp any any -> any any (msg:"PubSubHubbub"; appid:pubsubhubbub; sid:1001563; rev:1)
alert tcp any any -> any any (msg:"PubSubHubbub"; appid:ndgsa-crawler; sid:1001564; rev:1)
alert tcp any any -> any any (msg:"Microsoft Access"; appid:msoffice_access; sid:1001565; rev:1)
alert tcp any any -> any any (msg:"Dr. Watson"; appid:dr_watson; sid:1001566; rev:1)
alert tcp any any -> any any (msg:"NetSight"; appid:netsight; sid:1001567; rev:1)
alert tcp any any -> any any (msg:"Ovi Browser"; appid:ovi_browser; sid:1001568; rev:1)
alert tcp any any -> any any (msg:"Penultimate"; appid:penultimate; sid:1001569; rev:1)
alert tcp any any -> any any (msg:"OSSProxy"; appid:ossproxy; sid:1001570; rev:1)
alert tcp any any -> any any (msg:"NetNewsWire"; appid:netnewswire; sid:1001571; rev:1)
alert tcp any any -> any any (msg:"NetNewsWire"; appid:050plus; sid:1001572; rev:1)
alert tcp any any -> any any (msg:"MaxDB"; appid:maxdb; sid:1001573; rev:1)
alert tcp any any -> any any (msg:"MaxDB"; appid:urlgrabber; sid:1001574; rev:1)
alert tcp any any -> any any (msg:"Apache Nutch"; appid:apache_nutch; sid:1001575; rev:1)
alert tcp any any -> any any (msg:"MobileAsset"; appid:mobileasset; sid:1001576; rev:1)
alert tcp any any -> any any (msg:"MCStats"; appid:mcstats; sid:1001577; rev:1)
alert tcp any any -> any any (msg:"MapMyFitness"; appid:mapmyfitness; sid:1001578; rev:1)
alert tcp any any -> any any (msg:"JikeSpider"; appid:jikespider; sid:1001579; rev:1)
alert tcp any any -> any any (msg:"Mediabot"; appid:mediabot; sid:1001580; rev:1)
alert tcp any any -> any any (msg:"Feed43"; appid:feed43; sid:1001581; rev:1)
alert tcp any any -> any any (msg:"Dragon Dictate"; appid:dragon_dictate; sid:1001582; rev:1)
alert tcp any any -> any any (msg:"Coc Coc bot"; appid:coc_coc_bot; sid:1001583; rev:1)
alert tcp any any -> any any (msg:"Coc Coc bot"; appid:2345.com; sid:1001584; rev:1)
alert tcp any any -> any any (msg:"Forbes"; appid:forbes; sid:1001585; rev:1)
alert tcp any any -> any any (msg:"Freee TV"; appid:freee_tv; sid:1001586; rev:1)
alert tcp any any -> any any (msg:"IKEA.com"; appid:ikea.com; sid:1001587; rev:1)
alert tcp any any -> any any (msg:"Pchome"; appid:pchome; sid:1001588; rev:1)
alert tcp any any -> any any (msg:"TechInline"; appid:techinline; sid:1001589; rev:1)
alert tcp any any -> any any (msg:"TechInline"; appid:wikidot; sid:1001590; rev:1)
alert tcp any any -> any any (msg:"Quote.com"; appid:quote.com; sid:1001591; rev:1)
alert tcp any any -> any any (msg:"CBS Interactive"; appid:cbs_interactive; sid:1001592; rev:1)
alert tcp any any -> any any (msg:"Hupu"; appid:hupu; sid:1001593; rev:1)
alert tcp any any -> any any (msg:"Foursquare"; appid:foursquare; sid:1001594; rev:1)
alert tcp any any -> any any (msg:"The Internet Archive"; appid:the_internet_archive; sid:1001595; rev:1)
alert tcp any any -> any any (msg:"Doof"; appid:doof; sid:1001596; rev:1)
alert tcp any any -> any any (msg:"Adenin"; appid:adenin; sid:1001597; rev:1)
alert tcp any any -> any any (msg:"Groupon"; appid:groupon; sid:1001598; rev:1)
alert tcp any any -> any any (msg:"Match.com"; appid:match.com; sid:1001599; rev:1)
alert tcp any any -> any any (msg:"Meetup"; appid:meetup; sid:1001600; rev:1)
alert tcp any any -> any any (msg:"MyWebSearch"; appid:mywebsearch; sid:1001601; rev:1)
alert tcp any any -> any any (msg:"Uploading.com"; appid:uploading.com; sid:1001602; rev:1)
alert tcp any any -> any any (msg:"Viber"; appid:viber; sid:1001603; rev:1)
alert tcp any any -> any any (msg:"ADNStream"; appid:adnstream; sid:1001604; rev:1)
alert tcp any any -> any any (msg:"China.com"; appid:china.com; sid:1001605; rev:1)
alert tcp any any -> any any (msg:"In.com"; appid:in.com; sid:1001606; rev:1)
alert tcp any any -> any any (msg:"In.com"; appid:it168; sid:1001607; rev:1)
alert tcp any any -> any any (msg:"NFL.com"; appid:nfl.com; sid:1001608; rev:1)
alert tcp any any -> any any (msg:"NFL.com"; appid:wetpaint entertainment; sid:1001609; rev:1)
alert tcp any any -> any any (msg:"Tango"; appid:tango; sid:1001610; rev:1)
alert tcp any any -> any any (msg:"PPTV"; appid:pptv; sid:1001611; rev:1)
alert tcp any any -> any any (msg:"Apple Maps"; appid:apple_maps; sid:1001612; rev:1)
alert tcp any any -> any any (msg:"SendSpace"; appid:sendspace; sid:1001613; rev:1)
alert tcp any any -> any any (msg:"Sogou"; appid:sogou; sid:1001614; rev:1)
alert tcp any any -> any any (msg:"Sogou"; appid:17173.com; sid:1001615; rev:1)
alert tcp any any -> any any (msg:"Alibaba"; appid:alibaba; sid:1001616; rev:1)
alert tcp any any -> any any (msg:"Tmall"; appid:tmall; sid:1001617; rev:1)
alert tcp any any -> any any (msg:"Etao"; appid:etao; sid:1001618; rev:1)
alert tcp any any -> any any (msg:"Aliyun"; appid:aliyun; sid:1001619; rev:1)
alert tcp any any -> any any (msg:"Naverisk"; appid:naverisk; sid:1001620; rev:1)
alert tcp any any -> any any (msg:"Funshion"; appid:funshion; sid:1001621; rev:1)
alert tcp any any -> any any (msg:"Tokbox"; appid:tokbox; sid:1001622; rev:1)
alert tcp any any -> any any (msg:"Google ads"; appid:google_ads; sid:1001623; rev:1)
alert tcp any any -> any any (msg:"RichRelevance"; appid:richrelevance; sid:1001624; rev:1)
alert tcp any any -> any any (msg:"Quantcast"; appid:quantcast; sid:1001625; rev:1)
alert tcp any any -> any any (msg:"Scorecard Research"; appid:scorecard_research; sid:1001626; rev:1)
alert tcp any any -> any any (msg:"SPC Media"; appid:spc_media; sid:1001627; rev:1)
alert tcp any any -> any any (msg:"Epsilon"; appid:epsilon; sid:1001628; rev:1)
alert tcp any any -> any any (msg:"AppNexus"; appid:appnexus; sid:1001629; rev:1)
alert tcp any any -> any any (msg:"Adconion Media Group"; appid:adconion_media_group; sid:1001630; rev:1)
alert tcp any any -> any any (msg:"OpenX"; appid:openx; sid:1001631; rev:1)
alert tcp any any -> any any (msg:"MediaMath"; appid:mediamath; sid:1001632; rev:1)
alert tcp any any -> any any (msg:"Rubicon Project"; appid:rubicon_project; sid:1001633; rev:1)
alert tcp any any -> any any (msg:"33Across"; appid:33across; sid:1001634; rev:1)
alert tcp any any -> any any (msg:"Akamai NetSession Interface"; appid:akamai_netsess; sid:1001635; rev:1)
alert tcp any any -> any any (msg:"AhrefsBot"; appid:ahrefsbot; sid:1001636; rev:1)
alert tcp any any -> any any (msg:"AddThis Bot"; appid:addthis_bot; sid:1001637; rev:1)
alert tcp any any -> any any (msg:"IMTransferAgent"; appid:imtransferagent; sid:1001638; rev:1)
alert tcp any any -> any any (msg:"The Atlantic"; appid:the_atlantic; sid:1001639; rev:1)
alert tcp any any -> any any (msg:"Svpply"; appid:svpply; sid:1001640; rev:1)
alert tcp any any -> any any (msg:"Southern Living"; appid:southern_living; sid:1001641; rev:1)
alert tcp any any -> any any (msg:"Buffer"; appid:buffer; sid:1001642; rev:1)
alert tcp any any -> any any (msg:"Coupa"; appid:coupa; sid:1001643; rev:1)
alert tcp any any -> any any (msg:"The Escapist Magazine"; appid:escapist; sid:1001644; rev:1)
alert tcp any any -> any any (msg:"Pocket"; appid:pocket; sid:1001645; rev:1)
alert tcp any any -> any any (msg:"Grantland"; appid:grantland; sid:1001646; rev:1)
alert tcp any any -> any any (msg:"The Independent"; appid:the_independent; sid:1001647; rev:1)
alert tcp any any -> any any (msg:"Instapaper"; appid:instapaper; sid:1001648; rev:1)
alert tcp any any -> any any (msg:"KBS"; appid:kbs; sid:1001649; rev:1)
alert tcp any any -> any any (msg:"Pinboard"; appid:pinboard; sid:1001650; rev:1)
alert tcp any any -> any any (msg:"Pushover"; appid:pushover; sid:1001651; rev:1)
alert tcp any any -> any any (msg:"Dots"; appid:dots; sid:1001652; rev:1)
alert tcp any any -> any any (msg:"Improve Digital"; appid:improve_digital; sid:1001653; rev:1)
alert tcp any any -> any any (msg:"BlueKai"; appid:bluekai; sid:1001654; rev:1)
alert tcp any any -> any any (msg:"Admeld"; appid:admeld; sid:1001655; rev:1)
alert tcp any any -> any any (msg:"iPerceptions"; appid:iperceptions; sid:1001656; rev:1)
alert tcp any any -> any any (msg:"Atlas Advertiser Suite"; appid:atlas_advertiser_suite; sid:1001657; rev:1)
alert tcp any any -> any any (msg:"BRSRVR"; appid:brsrvr; sid:1001658; rev:1)
alert tcp any any -> any any (msg:"Compete"; appid:compete; sid:1001659; rev:1)
alert tcp any any -> any any (msg:"BRCDN"; appid:brcdn; sid:1001660; rev:1)
alert tcp any any -> any any (msg:"Silverpop"; appid:silverpop; sid:1001661; rev:1)
alert tcp any any -> any any (msg:"Infonline"; appid:infonline; sid:1001662; rev:1)
alert tcp any any -> any any (msg:"comScore"; appid:comscore; sid:1001663; rev:1)
alert tcp any any -> any any (msg:"Komli Media"; appid:komli_media; sid:1001664; rev:1)
alert tcp any any -> any any (msg:"Sizmek Ad Suite"; appid:sizmek_ad_suite; sid:1001665; rev:1)
alert tcp any any -> any any (msg:"Lotame"; appid:lotame; sid:1001666; rev:1)
alert tcp any any -> any any (msg:"Krux"; appid:krux; sid:1001667; rev:1)
alert tcp any any -> any any (msg:"AudienceScience"; appid:audiencescience; sid:1001668; rev:1)
alert tcp any any -> any any (msg:"Nielsen"; appid:nielsen; sid:1001669; rev:1)
alert tcp any any -> any any (msg:"Google Play"; appid:google_play; sid:1001670; rev:1)
alert tcp any any -> any any (msg:"Android.com"; appid:android.com; sid:1001671; rev:1)
alert tcp any any -> any any (msg:"PDBox"; appid:pdbox; sid:1001672; rev:1)
alert tcp any any -> any any (msg:"Skype for Business"; appid:skype_for_business; sid:1001673; rev:1)
alert tcp any any -> any any (msg:"East Money"; appid:east_money; sid:1001674; rev:1)
alert tcp any any -> any any (msg:"Blokus"; appid:blokus; sid:1001675; rev:1)
alert tcp any any -> any any (msg:"Freelancer"; appid:freelancer; sid:1001676; rev:1)
alert tcp any any -> any any (msg:"Goal"; appid:goal; sid:1001677; rev:1)
alert tcp any any -> any any (msg:"HubPages"; appid:hubpages; sid:1001678; rev:1)
alert tcp any any -> any any (msg:"Marca"; appid:marca; sid:1001679; rev:1)
alert tcp any any -> any any (msg:"Telly"; appid:telly; sid:1001680; rev:1)
alert tcp any any -> any any (msg:"Chinauma"; appid:chinauma; sid:1001681; rev:1)
alert tcp any any -> any any (msg:"adSage"; appid:adsage; sid:1001682; rev:1)
alert tcp any any -> any any (msg:"247 Inc."; appid:247_inc.; sid:1001683; rev:1)
alert tcp any any -> any any (msg:"SLI Systems"; appid:sli_systems; sid:1001684; rev:1)
alert tcp any any -> any any (msg:"OwnerIQ"; appid:owneriq; sid:1001685; rev:1)
alert tcp any any -> any any (msg:"Monetate"; appid:monetate; sid:1001686; rev:1)
alert tcp any any -> any any (msg:"AdReady"; appid:adready; sid:1001687; rev:1)
alert tcp any any -> any any (msg:"The Trade Desk"; appid:the_trade_desk; sid:1001688; rev:1)
alert tcp any any -> any any (msg:"AdGear"; appid:adgear; sid:1001689; rev:1)
alert tcp any any -> any any (msg:"MediaV"; appid:mediav; sid:1001690; rev:1)
alert tcp any any -> any any (msg:"ClickTale"; appid:clicktale; sid:1001691; rev:1)
alert tcp any any -> any any (msg:"Adtech"; appid:adtech; sid:1001692; rev:1)
alert tcp any any -> any any (msg:"Amobee"; appid:amobee; sid:1001693; rev:1)
alert tcp any any -> any any (msg:"LeadBolt"; appid:leadbolt; sid:1001694; rev:1)
alert tcp any any -> any any (msg:"Mobile Theory"; appid:mobile_theory; sid:1001695; rev:1)
alert tcp any any -> any any (msg:"Drawbridge"; appid:drawbridge; sid:1001696; rev:1)
alert tcp any any -> any any (msg:"Evidon"; appid:evidon; sid:1001697; rev:1)
alert tcp any any -> any any (msg:"Brilig"; appid:brilig; sid:1001698; rev:1)
alert tcp any any -> any any (msg:"Casale"; appid:casale; sid:1001699; rev:1)
alert tcp any any -> any any (msg:"Chango"; appid:chango; sid:1001700; rev:1)
alert tcp any any -> any any (msg:"Criteo"; appid:criteo; sid:1001701; rev:1)
alert tcp any any -> any any (msg:"Narratiive"; appid:narratiive; sid:1001702; rev:1)
alert tcp any any -> any any (msg:"eXelate"; appid:exelate; sid:1001703; rev:1)
alert tcp any any -> any any (msg:"Exponential Interactive"; appid:exponential_interactive; sid:1001704; rev:1)
alert tcp any any -> any any (msg:"Vibrant"; appid:vibrant; sid:1001705; rev:1)
alert tcp any any -> any any (msg:"Luminate"; appid:luminate; sid:1001706; rev:1)
alert tcp any any -> any any (msg:"Media6Degrees"; appid:media6degrees; sid:1001707; rev:1)
alert tcp any any -> any any (msg:"Motrixi"; appid:motrixi; sid:1001708; rev:1)
alert tcp any any -> any any (msg:"eyeReturn"; appid:eyereturn; sid:1001709; rev:1)
alert tcp any any -> any any (msg:"InSkin Media"; appid:inskin_media; sid:1001710; rev:1)
alert tcp any any -> any any (msg:"Connextra"; appid:connextra; sid:1001711; rev:1)
alert tcp any any -> any any (msg:"Optimizely"; appid:optimizely; sid:1001712; rev:1)
alert tcp any any -> any any (msg:"Integral Ad Science"; appid:integral_ad_science; sid:1001713; rev:1)
alert tcp any any -> any any (msg:"Proclivity"; appid:proclivity; sid:1001714; rev:1)
alert tcp any any -> any any (msg:"TubeMogul"; appid:tubemogul; sid:1001715; rev:1)
alert tcp any any -> any any (msg:"CloudFlare"; appid:cloudflare; sid:1001716; rev:1)
alert tcp any any -> any any (msg:"TLVMedia"; appid:tlvmedia; sid:1001717; rev:1)
alert tcp any any -> any any (msg:"Neustar Information Services"; appid:neustar_information_services; sid:1001718; rev:1)
alert tcp any any -> any any (msg:"AdXpose"; appid:adxpose; sid:1001719; rev:1)
alert tcp any any -> any any (msg:"EQ Ads"; appid:eq_ads; sid:1001720; rev:1)
alert tcp any any -> any any (msg:"TowerData"; appid:towerdata; sid:1001721; rev:1)
alert tcp any any -> any any (msg:"Xaxis"; appid:xaxis; sid:1001722; rev:1)
alert tcp any any -> any any (msg:"DataLogicx"; appid:datalogicx; sid:1001723; rev:1)
alert tcp any any -> any any (msg:"Ybrant Digital"; appid:ybrant_digital; sid:1001724; rev:1)
alert tcp any any -> any any (msg:"Aggregate Knowledge"; appid:aggregate_knowledge; sid:1001725; rev:1)
alert tcp any any -> any any (msg:"SpotXchange"; appid:spotxchange; sid:1001726; rev:1)
alert tcp any any -> any any (msg:"NetSeer"; appid:netseer; sid:1001727; rev:1)
alert tcp any any -> any any (msg:"Resonate Networks"; appid:resonate_networks; sid:1001728; rev:1)
alert tcp any any -> any any (msg:"Engage BDR"; appid:engage_bdr; sid:1001729; rev:1)
alert tcp any any -> any any (msg:"Connexity"; appid:connexity; sid:1001730; rev:1)
alert tcp any any -> any any (msg:"Bizo"; appid:bizo; sid:1001731; rev:1)
alert tcp any any -> any any (msg:"Verizon Media"; appid:verizon_media; sid:1001732; rev:1)
alert tcp any any -> any any (msg:"Federated Media"; appid:federated_media; sid:1001733; rev:1)
alert tcp any any -> any any (msg:"Six Apart"; appid:six_apart; sid:1001734; rev:1)
alert tcp any any -> any any (msg:"MaxPoint Interactive"; appid:maxpoint_interactive; sid:1001735; rev:1)
alert tcp any any -> any any (msg:"Rocket Fuel"; appid:rocket_fuel; sid:1001736; rev:1)
alert tcp any any -> any any (msg:"RhythmOne"; appid:rhythmone; sid:1001737; rev:1)
alert tcp any any -> any any (msg:"RhythmOne"; appid:contnet; sid:1001738; rev:1)
alert tcp any any -> any any (msg:"Smart AdServer"; appid:smart_adserver; sid:1001739; rev:1)
alert tcp any any -> any any (msg:"ADMETA"; appid:admeta; sid:1001740; rev:1)
alert tcp any any -> any any (msg:"Adify"; appid:adify; sid:1001741; rev:1)
alert tcp any any -> any any (msg:"ContextWeb"; appid:contextweb; sid:1001742; rev:1)
alert tcp any any -> any any (msg:"cXense"; appid:cxense; sid:1001743; rev:1)
alert tcp any any -> any any (msg:"Caraytech"; appid:caraytech; sid:1001744; rev:1)
alert tcp any any -> any any (msg:"Freewheel"; appid:freewheel; sid:1001745; rev:1)
alert tcp any any -> any any (msg:"BV! Media"; appid:bv!_media; sid:1001746; rev:1)
alert tcp any any -> any any (msg:"Adtegrity"; appid:adtegrity; sid:1001747; rev:1)
alert tcp any any -> any any (msg:"AOL Ads"; appid:aol_ads; sid:1001748; rev:1)
alert tcp any any -> any any (msg:"Compuware"; appid:compuware; sid:1001749; rev:1)
alert tcp any any -> any any (msg:"Aptean"; appid:aptean; sid:1001750; rev:1)
alert tcp any any -> any any (msg:"Polldaddy"; appid:polldaddy; sid:1001751; rev:1)
alert tcp any any -> any any (msg:"Undertone"; appid:undertone; sid:1001752; rev:1)
alert tcp any any -> any any (msg:"VoiceFive"; appid:voicefive; sid:1001753; rev:1)
alert tcp any any -> any any (msg:"ClickBooth"; appid:clickbooth; sid:1001754; rev:1)
alert tcp any any -> any any (msg:"Webtrends"; appid:webtrends; sid:1001755; rev:1)
alert tcp any any -> any any (msg:"Telecom Express"; appid:telecom_express; sid:1001756; rev:1)
alert tcp any any -> any any (msg:"Skimlinks"; appid:skimlinks; sid:1001757; rev:1)
alert tcp any any -> any any (msg:"Crowd Science"; appid:crowd_science; sid:1001758; rev:1)
alert tcp any any -> any any (msg:"Mixpanel"; appid:mixpanel; sid:1001759; rev:1)
alert tcp any any -> any any (msg:"CNZZ"; appid:cnzz; sid:1001760; rev:1)
alert tcp any any -> any any (msg:"HowardForums"; appid:howardforums; sid:1001761; rev:1)
alert tcp any any -> any any (msg:"Softonic"; appid:softonic; sid:1001762; rev:1)
alert tcp any any -> any any (msg:"Booking.com"; appid:booking.com; sid:1001763; rev:1)
alert tcp any any -> any any (msg:"Concur"; appid:concur; sid:1001764; rev:1)
alert tcp any any -> any any (msg:"TeacherTube"; appid:teachertube; sid:1001765; rev:1)
alert tcp any any -> any any (msg:"Rambler"; appid:rambler; sid:1001766; rev:1)
alert tcp any any -> any any (msg:"EarthCam"; appid:earthcam; sid:1001767; rev:1)
alert tcp any any -> any any (msg:"Softpedia"; appid:softpedia; sid:1001768; rev:1)
alert tcp any any -> any any (msg:"TechCrunch"; appid:techcrunch; sid:1001769; rev:1)
alert tcp any any -> any any (msg:"Hyves"; appid:hyves; sid:1001770; rev:1)
alert tcp any any -> any any (msg:"LA Times"; appid:la_times; sid:1001771; rev:1)
alert tcp any any -> any any (msg:"China News"; appid:china_news; sid:1001772; rev:1)
alert tcp any any -> any any (msg:"Nico Nico Douga Video"; appid:nico_douga_video; sid:1001773; rev:1)
alert tcp any any -> any any (msg:"Aliwangwang"; appid:aliwangwang; sid:1001774; rev:1)
alert tcp any any -> any any (msg:"WeChat"; appid:wechat; sid:1001775; rev:1)
alert tcp any any -> any any (msg:"WeChat media"; appid:wechat-media; sid:1001776; rev:1)
alert tcp any any -> any any (msg:"Xbox Live sites"; appid:xbox_live_sites; sid:1001777; rev:1)
alert tcp any any -> any any (msg:"Windows Phone sites"; appid:windows_phone_sites; sid:1001778; rev:1)
alert tcp any any -> any any (msg:"SopCast"; appid:sopcast; sid:1001779; rev:1)
alert tcp any any -> any any (msg:"Ultrasurf"; appid:ultrasurf; sid:1001780; rev:1)
alert tcp any any -> any any (msg:"ShareThis"; appid:sharethis; sid:1001781; rev:1)
alert tcp any any -> any any (msg:"LOCKSS"; appid:lockss; sid:1001782; rev:1)
alert tcp any any -> any any (msg:"GOMTV Remote Control"; appid:gomtv_remote_control; sid:1001783; rev:1)
alert tcp any any -> any any (msg:"GOMTV.net"; appid:gomtv.net; sid:1001784; rev:1)
alert tcp any any -> any any (msg:"GOMTV.com"; appid:gomtv.com; sid:1001785; rev:1)
alert tcp any any -> any any (msg:"GoToWebinar"; appid:gotowebinar; sid:1001786; rev:1)
alert tcp any any -> any any (msg:"GoToTraining"; appid:gototraining; sid:1001787; rev:1)
alert tcp any any -> any any (msg:"VyprVPN Login"; appid:vyprvpn_login; sid:1001788; rev:1)
alert tcp any any -> any any (msg:"Tunnelbear Login"; appid:tunnelbear_login; sid:1001789; rev:1)
alert tcp any any -> any any (msg:"Ivacy Login"; appid:ivacy_login; sid:1001790; rev:1)
alert tcp any any -> any any (msg:"Hide My Ass!"; appid:hide_my_ass!; sid:1001791; rev:1)
alert tcp any any -> any any (msg:"VEVO.com"; appid:vevo.com; sid:1001792; rev:1)
alert tcp any any -> any any (msg:"PNAS"; appid:pnas; sid:1001793; rev:1)
alert tcp any any -> any any (msg:"HBO"; appid:hbo; sid:1001794; rev:1)
alert tcp any any -> any any (msg:"Stitcher"; appid:stitcher; sid:1001795; rev:1)
alert tcp any any -> any any (msg:"Cisco"; appid:cisco; sid:1001796; rev:1)
alert tcp any any -> any any (msg:"The Baltimore Sun"; appid:baltimore_sun; sid:1001797; rev:1)
alert tcp any any -> any any (msg:"Dilbert.com"; appid:dilbert; sid:1001798; rev:1)
alert tcp any any -> any any (msg:"Google URL Shortener"; appid:google_url_shrt; sid:1001799; rev:1)
alert tcp any any -> any any (msg:"Hotels.com"; appid:hotels; sid:1001800; rev:1)
alert tcp any any -> any any (msg:"JSTOR"; appid:jstor; sid:1001801; rev:1)
alert tcp any any -> any any (msg:"Xiami.com"; appid:xiami.com; sid:1001802; rev:1)
alert tcp any any -> any any (msg:"INRIX"; appid:inrix; sid:1001803; rev:1)
alert tcp any any -> any any (msg:"Lijit"; appid:lijit; sid:1001804; rev:1)
alert tcp any any -> any any (msg:"Moat"; appid:moat; sid:1001805; rev:1)
alert tcp any any -> any any (msg:"Ando Media"; appid:ando_media; sid:1001806; rev:1)
alert tcp any any -> any any (msg:"Break.com"; appid:break; sid:1001807; rev:1)
alert tcp any any -> any any (msg:"Resilio Sync"; appid:bittorrent_sync; sid:1001808; rev:1)
alert tcp any any -> any any (msg:"Printer Pro Desktop"; appid:printer_pro_desktop; sid:1001809; rev:1)
alert tcp any any -> any any (msg:"Apple Music"; appid:apple_music; sid:1001810; rev:1)
alert tcp any any -> any any (msg:"Hideman Login"; appid:hideman_login; sid:1001811; rev:1)
alert tcp any any -> any any (msg:"Cloudnymous Login"; appid:cloudnymous_login; sid:1001812; rev:1)
alert tcp any any -> any any (msg:"VMware vCenter client"; appid:vmware_vcenter_client; sid:1001813; rev:1)
alert tcp any any -> any any (msg:"NAT-PMP"; appid:nat-pmp; sid:1001814; rev:1)
alert tcp any any -> any any (msg:"Python urllib"; appid:python_urllib; sid:1001815; rev:1)
alert tcp any any -> any any (msg:"Genieo"; appid:genieo; sid:1001816; rev:1)
alert tcp any any -> any any (msg:"Mathworks"; appid:mathworks; sid:1001817; rev:1)
alert tcp any any -> any any (msg:"GoodSync"; appid:goodsync; sid:1001818; rev:1)
alert tcp any any -> any any (msg:"UpToDate"; appid:uptodate; sid:1001819; rev:1)
alert tcp any any -> any any (msg:"New Relic"; appid:new_relic; sid:1001820; rev:1)
alert tcp any any -> any any (msg:"WorldCat"; appid:worldcat; sid:1001821; rev:1)
alert tcp any any -> any any (msg:"Apple App Store"; appid:apple_app_store; sid:1001822; rev:1)
alert tcp any any -> any any (msg:"Fuyin.TV"; appid:fuyin.tv; sid:1001823; rev:1)
alert tcp any any -> any any (msg:"SHOWTIME ANYTIME"; appid:showtime_anytime; sid:1001824; rev:1)
alert tcp any any -> any any (msg:"Drupal"; appid:drupal; sid:1001825; rev:1)
alert tcp any any -> any any (msg:"Sky.com"; appid:sky; sid:1001826; rev:1)
alert tcp any any -> any any (msg:"Arizona Public Media"; appid:arizona_public; sid:1001827; rev:1)
alert tcp any any -> any any (msg:"EA Games"; appid:ea_games; sid:1001828; rev:1)
alert tcp any any -> any any (msg:"TomTom"; appid:tomtom; sid:1001829; rev:1)
alert tcp any any -> any any (msg:"OpenDNS"; appid:opendns; sid:1001830; rev:1)
alert tcp any any -> any any (msg:"Gizmodo"; appid:gizmodo; sid:1001831; rev:1)
alert tcp any any -> any any (msg:"SimplePie"; appid:simplepie; sid:1001832; rev:1)
alert tcp any any -> any any (msg:"Sophos Live Protection"; appid:sophos_live_protection; sid:1001833; rev:1)
alert tcp any any -> any any (msg:"Android Asynchronous Http Client"; appid:android_asynchronous_http_client; sid:1001834; rev:1)
alert tcp any any -> any any (msg:"VMware Server Console"; appid:vmware-vsphere; sid:1001835; rev:1)
alert tcp any any -> any any (msg:"Integromedb Crawler"; appid:integromedb; sid:1001836; rev:1)
alert tcp any any -> any any (msg:"Twitter4J"; appid:twitter4j; sid:1001837; rev:1)
alert tcp any any -> any any (msg:"Twitter4J"; appid:msnbot; sid:1001838; rev:1)
alert tcp any any -> any any (msg:"Pingdom"; appid:pingdom; sid:1001839; rev:1)
alert tcp any any -> any any (msg:"PHP-SOAP"; appid:php-soap; sid:1001840; rev:1)
alert tcp any any -> any any (msg:"Leap Motion sites"; appid:leap_motion_sites; sid:1001841; rev:1)
alert tcp any any -> any any (msg:"RealPlayer Cloud"; appid:realplayer_cld; sid:1001842; rev:1)
alert tcp any any -> any any (msg:"iBooks"; appid:ibooks; sid:1001843; rev:1)
alert tcp any any -> any any (msg:"iTunes Store"; appid:itunes_store; sid:1001844; rev:1)
alert tcp any any -> any any (msg:"RealNetworks"; appid:realnetworks; sid:1001845; rev:1)
alert tcp any any -> any any (msg:"Sametime"; appid:sametime; sid:1001846; rev:1)
alert tcp any any -> any any (msg:"Garmin"; appid:garmin; sid:1001847; rev:1)
alert tcp any any -> any any (msg:"Nexon"; appid:nexon; sid:1001848; rev:1)
alert tcp any any -> any any (msg:"Samsung Push Notification"; appid:samsung_push_notification; sid:1001849; rev:1)
alert tcp any any -> any any (msg:"TVonline.cc"; appid:tvonline.cc; sid:1001850; rev:1)
alert tcp any any -> any any (msg:"BesTV"; appid:bestv; sid:1001851; rev:1)
alert tcp any any -> any any (msg:"Zippyshare"; appid:zippyshare; sid:1001852; rev:1)
alert tcp any any -> any any (msg:"GTA Online"; appid:gta_online; sid:1001853; rev:1)
alert tcp any any -> any any (msg:"Remote Ctrl from iPhone/iPad"; appid:remote_ctrl_from_iphone/ipad; sid:1001854; rev:1)
alert tcp any any -> any any (msg:"Rockstar Games"; appid:rockstar_games; sid:1001855; rev:1)
alert tcp any any -> any any (msg:"iRODS"; appid:irods; sid:1001856; rev:1)
alert tcp any any -> any any (msg:"Nest Thermostat"; appid:nest_thermostat; sid:1001857; rev:1)
alert tcp any any -> any any (msg:"CTV"; appid:ctv; sid:1001858; rev:1)
alert tcp any any -> any any (msg:"CTV News"; appid:ctv_news; sid:1001859; rev:1)
alert tcp any any -> any any (msg:"Indiegogo"; appid:indiegogo; sid:1001860; rev:1)
alert tcp any any -> any any (msg:"KVOA.com"; appid:kvoa.com; sid:1001861; rev:1)
alert tcp any any -> any any (msg:"MailChimp"; appid:mailchimp; sid:1001862; rev:1)
alert tcp any any -> any any (msg:"MovieTickets.com"; appid:movietickets; sid:1001863; rev:1)
alert tcp any any -> any any (msg:"Comcast Mail"; appid:comcast_mail; sid:1001864; rev:1)
alert tcp any any -> any any (msg:"Coursera"; appid:coursera; sid:1001865; rev:1)
alert tcp any any -> any any (msg:"Kodi"; appid:kodi; sid:1001866; rev:1)
alert tcp any any -> any any (msg:"Network PID Checker"; appid:network_pid_chk; sid:1001867; rev:1)
alert tcp any any -> any any (msg:"Gazprom Media"; appid:gazprom_media; sid:1001868; rev:1)
alert tcp any any -> any any (msg:"Tvigle"; appid:tvigle; sid:1001869; rev:1)
alert tcp any any -> any any (msg:"Bandcamp"; appid:bandcamp; sid:1001870; rev:1)
alert tcp any any -> any any (msg:"NetBackup"; appid:netbackup; sid:1001871; rev:1)
alert tcp any any -> any any (msg:"Bluehost"; appid:bluehost; sid:1001872; rev:1)
alert tcp any any -> any any (msg:"SFGate"; appid:sfgate; sid:1001873; rev:1)
alert tcp any any -> any any (msg:"Library of Congress"; appid:library_of_congress; sid:1001874; rev:1)
alert tcp any any -> any any (msg:"OverBlog"; appid:overblog; sid:1001875; rev:1)
alert tcp any any -> any any (msg:"BBB"; appid:bbb; sid:1001876; rev:1)
alert tcp any any -> any any (msg:"AddToAny"; appid:addtoany; sid:1001877; rev:1)
alert tcp any any -> any any (msg:"TIME.com"; appid:time; sid:1001878; rev:1)
alert tcp any any -> any any (msg:"Phoca"; appid:phoca; sid:1001879; rev:1)
alert tcp any any -> any any (msg:"phpBB"; appid:phpbb; sid:1001880; rev:1)
alert tcp any any -> any any (msg:"HugeDomains.com"; appid:hugedomains.com; sid:1001881; rev:1)
alert tcp any any -> any any (msg:"GNU Project"; appid:gnu_project; sid:1001882; rev:1)
alert tcp any any -> any any (msg:"Lycos"; appid:lycos; sid:1001883; rev:1)
alert tcp any any -> any any (msg:"ConnMan"; appid:connman; sid:1001884; rev:1)
alert tcp any any -> any any (msg:"Creative Commons"; appid:creative_commons; sid:1001885; rev:1)
alert tcp any any -> any any (msg:"NAI"; appid:nai; sid:1001886; rev:1)
alert tcp any any -> any any (msg:"Joomla"; appid:joomla; sid:1001887; rev:1)
alert tcp any any -> any any (msg:"TinyURL"; appid:tinyurl; sid:1001888; rev:1)
alert tcp any any -> any any (msg:"Amazon Cloud Player"; appid:amazon_cloud_player; sid:1001889; rev:1)
alert tcp any any -> any any (msg:"Jimdo"; appid:jimdo; sid:1001890; rev:1)
alert tcp any any -> any any (msg:"Stanford University"; appid:standford_univ; sid:1001891; rev:1)
alert tcp any any -> any any (msg:"Harvard University"; appid:harvard_univ; sid:1001892; rev:1)
alert tcp any any -> any any (msg:"eRecht24"; appid:erecht24; sid:1001893; rev:1)
alert tcp any any -> any any (msg:"European Union"; appid:european_union; sid:1001894; rev:1)
alert tcp any any -> any any (msg:"European Union"; appid:bitly; sid:1001895; rev:1)
alert tcp any any -> any any (msg:"Viddler"; appid:viddler; sid:1001896; rev:1)
alert tcp any any -> any any (msg:"Merriam-Webster"; appid:merriam-webster; sid:1001897; rev:1)
alert tcp any any -> any any (msg:"Websense"; appid:websense; sid:1001898; rev:1)
alert tcp any any -> any any (msg:"Zbigz"; appid:zbigz; sid:1001899; rev:1)
alert tcp any any -> any any (msg:"Zulily"; appid:zulily; sid:1001900; rev:1)
alert tcp any any -> any any (msg:"Zattoo"; appid:zattoo; sid:1001901; rev:1)
alert tcp any any -> any any (msg:"Xfire"; appid:xfire; sid:1001902; rev:1)
alert tcp any any -> any any (msg:"Parallels"; appid:parallels; sid:1001903; rev:1)
alert tcp any any -> any any (msg:"Eyejot"; appid:eyejot; sid:1001904; rev:1)
alert tcp any any -> any any (msg:"Dogpile"; appid:dogpile; sid:1001905; rev:1)
alert tcp any any -> any any (msg:"DuckDuckGo"; appid:duckduckgo; sid:1001906; rev:1)
alert tcp any any -> any any (msg:"Exchange Online"; appid:exchange_online; sid:1001907; rev:1)
alert tcp any any -> any any (msg:"MS CDN"; appid:ms_cdn; sid:1001908; rev:1)
alert tcp any any -> any any (msg:"Office 365"; appid:office_365; sid:1001909; rev:1)
alert tcp any any -> any any (msg:"Sharepoint Online"; appid:sharepoint_online; sid:1001910; rev:1)
alert tcp any any -> any any (msg:"Tencent"; appid:tencent; sid:1001911; rev:1)
alert tcp any any -> any any (msg:"Picsearch"; appid:picsearch; sid:1001912; rev:1)
alert tcp any any -> any any (msg:"Fetion"; appid:fetion; sid:1001913; rev:1)
alert tcp any any -> any any (msg:"Fluxiom"; appid:fluxiom; sid:1001914; rev:1)
alert tcp any any -> any any (msg:"LeapFILE"; appid:leapfile; sid:1001915; rev:1)
alert tcp any any -> any any (msg:"Okurin"; appid:okurin; sid:1001916; rev:1)
alert tcp any any -> any any (msg:"RayFile"; appid:rayfile; sid:1001917; rev:1)
alert tcp any any -> any any (msg:"Fotki"; appid:fotki; sid:1001918; rev:1)
alert tcp any any -> any any (msg:"CrossLoop"; appid:crossloop; sid:1001919; rev:1)
alert tcp any any -> any any (msg:"eRoom"; appid:eroom; sid:1001920; rev:1)
alert tcp any any -> any any (msg:"Glide"; appid:glide; sid:1001921; rev:1)
alert tcp any any -> any any (msg:"Wii"; appid:wii; sid:1001922; rev:1)
alert tcp any any -> any any (msg:"Shopkick"; appid:shopkick; sid:1001923; rev:1)
alert tcp any any -> any any (msg:"Hangame"; appid:hangame; sid:1001924; rev:1)
alert tcp any any -> any any (msg:"SugarCRM"; appid:sugarcrm; sid:1001925; rev:1)
alert tcp any any -> any any (msg:"Megaproxy"; appid:megaproxy; sid:1001926; rev:1)
alert tcp any any -> any any (msg:"KProxy"; appid:kproxy; sid:1001927; rev:1)
alert tcp any any -> any any (msg:"Guardster"; appid:guardster; sid:1001928; rev:1)
alert tcp any any -> any any (msg:"FlyProxy"; appid:flyproxy; sid:1001929; rev:1)
alert tcp any any -> any any (msg:"Coral CDN"; appid:coral_cdn; sid:1001930; rev:1)
alert tcp any any -> any any (msg:"Pastebin.com"; appid:pastebin; sid:1001931; rev:1)
alert tcp any any -> any any (msg:"Zhihu.com"; appid:zhihu; sid:1001932; rev:1)
alert tcp any any -> any any (msg:"Twiddla"; appid:twiddla; sid:1001933; rev:1)
alert tcp any any -> any any (msg:"Quora"; appid:quora; sid:1001934; rev:1)
alert tcp any any -> any any (msg:"Yahoo! Mobage"; appid:yahoo_mobage; sid:1001935; rev:1)
alert tcp any any -> any any (msg:"Adobe Analytics"; appid:adobe_analytics; sid:1001936; rev:1)
alert tcp any any -> any any (msg:"Ado Tube"; appid:ado_tube; sid:1001937; rev:1)
alert tcp any any -> any any (msg:"AdRoll"; appid:adroll; sid:1001938; rev:1)
alert tcp any any -> any any (msg:"AdSame"; appid:adsame; sid:1001939; rev:1)
alert tcp any any -> any any (msg:"AD-X Tracking"; appid:ad-x_tracking; sid:1001940; rev:1)
alert tcp any any -> any any (msg:"Allegro.pl"; appid:allegro.pl; sid:1001941; rev:1)
alert tcp any any -> any any (msg:"Autohome.com.cn"; appid:autohome.com.cn; sid:1001942; rev:1)
alert tcp any any -> any any (msg:"Ganji"; appid:ganji; sid:1001943; rev:1)
alert tcp any any -> any any (msg:"Hao123.com"; appid:hao123.com; sid:1001944; rev:1)
alert tcp any any -> any any (msg:"Ifeng.com"; appid:ifeng.com; sid:1001945; rev:1)
alert tcp any any -> any any (msg:"BBC iPlayer"; appid:bbc_iplayer; sid:1001946; rev:1)
alert tcp any any -> any any (msg:"iStock"; appid:istock; sid:1001947; rev:1)
alert tcp any any -> any any (msg:"Kooora.com"; appid:kooora.com; sid:1001948; rev:1)
alert tcp any any -> any any (msg:"Mercado Livre"; appid:mercado_livre; sid:1001949; rev:1)
alert tcp any any -> any any (msg:"Mop.com"; appid:mop.com; sid:1001950; rev:1)
alert tcp any any -> any any (msg:"Motley Fool"; appid:motley_fool; sid:1001951; rev:1)
alert tcp any any -> any any (msg:"SiteScout"; appid:sitescout; sid:1001952; rev:1)
alert tcp any any -> any any (msg:"Zol.com.cn"; appid:zol.com.cn; sid:1001953; rev:1)
alert tcp any any -> any any (msg:"Bloglovin"; appid:bloglovin; sid:1001954; rev:1)
alert tcp any any -> any any (msg:"Baidu Movies"; appid:baidu_movies; sid:1001955; rev:1)
alert tcp any any -> any any (msg:"Microsoft CRM Dynamics"; appid:microsoft_crm_dynamics; sid:1001956; rev:1)
alert tcp any any -> any any (msg:"Gbridge"; appid:gbridge; sid:1001957; rev:1)
alert tcp any any -> any any (msg:"Mikogo"; appid:mikogo; sid:1001958; rev:1)
alert tcp any any -> any any (msg:"StreamWork"; appid:streamwork; sid:1001959; rev:1)
alert tcp any any -> any any (msg:"Xunlei Kankan"; appid:xunlei_kankan; sid:1001960; rev:1)
alert tcp any any -> any any (msg:"Google Groups"; appid:google_groups; sid:1001961; rev:1)
alert tcp any any -> any any (msg:"Google+ Photos"; appid:google+_photos; sid:1001962; rev:1)
alert tcp any any -> any any (msg:"Google+ Videos"; appid:google+_videos; sid:1001963; rev:1)
alert tcp any any -> any any (msg:"Myspace Photos"; appid:myspace_photos; sid:1001964; rev:1)
alert tcp any any -> any any (msg:"Myspace Videos"; appid:myspace_videos; sid:1001965; rev:1)
alert tcp any any -> any any (msg:"FileHost.ro"; appid:filehost.ro; sid:1001966; rev:1)
alert tcp any any -> any any (msg:"Gyao"; appid:gyao; sid:1001967; rev:1)
alert tcp any any -> any any (msg:"SVN"; appid:svn; sid:1001968; rev:1)
alert tcp any any -> any any (msg:"Quake Live"; appid:quake_live; sid:1001969; rev:1)
alert tcp any any -> any any (msg:"HTTP/2"; appid:http2; sid:1001970; rev:1)
alert tcp any any -> any any (msg:"Sophos Update"; appid:sophos_update; sid:1001971; rev:1)
alert tcp any any -> any any (msg:"Glype"; appid:glype; sid:1001972; rev:1)
alert tcp any any -> any any (msg:"Sanook.com"; appid:sanook.com; sid:1001973; rev:1)
alert tcp any any -> any any (msg:"AMMYY"; appid:ammyy; sid:1001974; rev:1)
alert tcp any any -> any any (msg:"Dropbox Upload"; appid:dropbox_upload; sid:1001975; rev:1)
alert tcp any any -> any any (msg:"Dropbox Download"; appid:dropbox_downld; sid:1001976; rev:1)
alert tcp any any -> any any (msg:"Dropbox Share"; appid:dropbox_share; sid:1001977; rev:1)
alert tcp any any -> any any (msg:"R6 FeedFetcher"; appid:r6_feedfetcher; sid:1001978; rev:1)
alert tcp any any -> any any (msg:"VMware Horizon View"; appid:vmware_horizon; sid:1001979; rev:1)
alert tcp any any -> any any (msg:"Google Accounts Authentication"; appid:google_accounts_authentication; sid:1001980; rev:1)
alert tcp any any -> any any (msg:"Cisco Phone"; appid:cisco_phone; sid:1001981; rev:1)
alert tcp any any -> any any (msg:"LinkedIn Profile"; appid:linked_profile; sid:1001982; rev:1)
alert tcp any any -> any any (msg:"LinkedIn Inbox"; appid:linked_inbox; sid:1001983; rev:1)
alert tcp any any -> any any (msg:"iTunes iPhone"; appid:itunes_iphone; sid:1001984; rev:1)
alert tcp any any -> any any (msg:"iTunes iPod"; appid:itunes_ipod; sid:1001985; rev:1)
alert tcp any any -> any any (msg:"iTunes iPad"; appid:itunes_ipad; sid:1001986; rev:1)
alert tcp any any -> any any (msg:"Facebook Utilities"; appid:fb_utilities; sid:1001987; rev:1)
alert tcp any any -> any any (msg:"Facebook Sports"; appid:fb_sports; sid:1001988; rev:1)
alert tcp any any -> any any (msg:"Facebook Games"; appid:fb_games; sid:1001989; rev:1)
alert tcp any any -> any any (msg:"YiXin"; appid:yixin; sid:1001990; rev:1)
alert tcp any any -> any any (msg:"Shareman"; appid:shareman; sid:1001991; rev:1)
alert tcp any any -> any any (msg:"iTunes Desktop"; appid:itunes_desktop; sid:1001992; rev:1)
alert tcp any any -> any any (msg:"Facebook Photos"; appid:fb_photo; sid:1001993; rev:1)
alert tcp any any -> any any (msg:"Yahoo! Accounts"; appid:yahoo_login; sid:1001994; rev:1)
alert tcp any any -> any any (msg:"ESPN Video"; appid:espn_video; sid:1001995; rev:1)
alert tcp any any -> any any (msg:"Facebook Applications Other"; appid:fb_appl_other; sid:1001996; rev:1)
alert tcp any any -> any any (msg:"Perforce"; appid:perforce; sid:1001997; rev:1)
alert tcp any any -> any any (msg:"Bazaarvoice"; appid:bazaarvoice; sid:1001998; rev:1)
alert tcp any any -> any any (msg:"SCCP"; appid:sccp; sid:1001999; rev:1)
alert tcp any any -> any any (msg:"Telepresence Control"; appid:ciscotelepresnc; sid:1002000; rev:1)
alert tcp any any -> any any (msg:"Tomatopang"; appid:tomatopang; sid:1002001; rev:1)
alert tcp any any -> any any (msg:"VDOLive"; appid:vdolive; sid:1002002; rev:1)
alert tcp any any -> any any (msg:"DeNA websites"; appid:dena_websites; sid:1002003; rev:1)
alert tcp any any -> any any (msg:"JonDo"; appid:jondo; sid:1002004; rev:1)
alert tcp any any -> any any (msg:"Sina Video"; appid:sina_video; sid:1002005; rev:1)
alert tcp any any -> any any (msg:"Yahoo! Flash"; appid:yahoo!_flash; sid:1002006; rev:1)
alert tcp any any -> any any (msg:"Crackle Video"; appid:crackle_video; sid:1002007; rev:1)
alert tcp any any -> any any (msg:"Apple Remote Desktop"; appid:ard; sid:1002008; rev:1)
alert tcp any any -> any any (msg:"Google Hangouts"; appid:google_hangouts; sid:1002009; rev:1)
alert tcp any any -> any any (msg:"LinkedIn Upload"; appid:linkedin_upload; sid:1002010; rev:1)
alert tcp any any -> any any (msg:"3Com AMP3"; appid:3com_amp3; sid:1002011; rev:1)
alert tcp any any -> any any (msg:"Access Network"; appid:access_network; sid:1002012; rev:1)
alert tcp any any -> any any (msg:"AccessBuilder"; appid:accessbuilder; sid:1002013; rev:1)
alert tcp any any -> any any (msg:"AODV"; appid:aodv; sid:1002014; rev:1)
alert tcp any any -> any any (msg:"ALPES"; appid:alpes; sid:1002015; rev:1)
alert tcp any any -> any any (msg:"Adobe PostScript"; appid:adobe_postscript; sid:1002016; rev:1)
alert tcp any any -> any any (msg:"Aeolon Core Protocol"; appid:aeolon_core_protocol; sid:1002017; rev:1)
alert tcp any any -> any any (msg:"AgentX"; appid:agentx; sid:1002018; rev:1)
alert tcp any any -> any any (msg:"AgentX"; appid:connendp; sid:1002019; rev:1)
alert tcp any any -> any any (msg:"PowerChute"; appid:powerchute; sid:1002020; rev:1)
alert tcp any any -> any any (msg:"AMInet"; appid:aminet; sid:1002021; rev:1)
alert tcp any any -> any any (msg:"Apertus Tech Load Distribution"; appid:apertus_tech_load_distribution; sid:1002022; rev:1)
alert tcp any any -> any any (msg:"Apertus Tech Load Distribution"; appid:appleqtcsrvr; sid:1002023; rev:1)
alert tcp any any -> any any (msg:"AEP"; appid:aep; sid:1002024; rev:1)
alert tcp any any -> any any (msg:"NBP"; appid:nbp; sid:1002025; rev:1)
alert tcp any any -> any any (msg:"AppleTalk Routing Maintenance"; appid:appletalk_routing_maintenance; sid:1002026; rev:1)
alert tcp any any -> any any (msg:"AppleTalk Unused 203"; appid:appletalk_203; sid:1002027; rev:1)
alert tcp any any -> any any (msg:"AppleTalk Unused 205"; appid:appletalk_205; sid:1002028; rev:1)
alert tcp any any -> any any (msg:"AppleTalk Unused 207"; appid:appletalk_207; sid:1002029; rev:1)
alert tcp any any -> any any (msg:"AppleTalk Unused 208"; appid:appletalk_208; sid:1002030; rev:1)
alert tcp any any -> any any (msg:"AURP"; appid:aurp; sid:1002031; rev:1)
alert tcp any any -> any any (msg:"AppleTalk Zone Information Protocol"; appid:appletalk_zone_information_protocol; sid:1002032; rev:1)
alert tcp any any -> any any (msg:"ApplianceWare Managment Protocol"; appid:applianceware_managment_protocol; sid:1002033; rev:1)
alert tcp any any -> any any (msg:"ACAP"; appid:acap; sid:1002034; rev:1)
alert tcp any any -> any any (msg:"Applix ac"; appid:applix_ac; sid:1002035; rev:1)
alert tcp any any -> any any (msg:"Ariel2"; appid:ariel2; sid:1002036; rev:1)
alert tcp any any -> any any (msg:"Ariel3"; appid:ariel3; sid:1002037; rev:1)
alert tcp any any -> any any (msg:"AS Server Mapper"; appid:as_server_mapper; sid:1002038; rev:1)
alert tcp any any -> any any (msg:"Asipregistry"; appid:asipregistry; sid:1002039; rev:1)
alert tcp any any -> any any (msg:"Aurora CMGR"; appid:aurora_cmgr; sid:1002040; rev:1)
alert tcp any any -> any any (msg:"dcLINK"; appid:dclink; sid:1002041; rev:1)
alert tcp any any -> any any (msg:"Avian"; appid:avian; sid:1002042; rev:1)
alert tcp any any -> any any (msg:"Banyan VIP"; appid:banyan_vip; sid:1002043; rev:1)
alert tcp any any -> any any (msg:"Banyan VIP"; appid:banyan-rpc; sid:1002044; rev:1)
alert tcp any any -> any any (msg:"RSH-SPX"; appid:rsh-spx; sid:1002045; rev:1)
alert tcp any any -> any any (msg:"RSH-SPX"; appid:bgs-nsi; sid:1002046; rev:1)
alert tcp any any -> any any (msg:"RSH-SPX"; appid:bmpp; sid:1002047; rev:1)
alert tcp any any -> any any (msg:"Borland DSJ"; appid:borland_dsj; sid:1002048; rev:1)
alert tcp any any -> any any (msg:"BACnet"; appid:bacnet; sid:1002049; rev:1)
alert tcp any any -> any any (msg:"CAB Protocol"; appid:cab_protocol; sid:1002050; rev:1)
alert tcp any any -> any any (msg:"Cabletron Management Protocol"; appid:cabletron_management_protocol; sid:1002051; rev:1)
alert tcp any any -> any any (msg:"CadLock"; appid:cadlock; sid:1002052; rev:1)
alert tcp any any -> any any (msg:"Call of Duty"; appid:call_of_duty; sid:1002053; rev:1)
alert tcp any any -> any any (msg:"Call of Duty"; appid:campaign contribution disclosures; sid:1002054; rev:1)
alert tcp any any -> any any (msg:"Chat"; appid:chat; sid:1002055; rev:1)
alert tcp any any -> any any (msg:"Chshell"; appid:chshell; sid:1002056; rev:1)
alert tcp any any -> any any (msg:"CIMPLEX"; appid:cimplex; sid:1002057; rev:1)
alert tcp any any -> any any (msg:"Cisco NAC"; appid:cisco_nac; sid:1002058; rev:1)
alert tcp any any -> any any (msg:"Citrix Static"; appid:citrix_static; sid:1002059; rev:1)
alert tcp any any -> any any (msg:"CMIP/TCP Manager"; appid:cmip/tcp_manager; sid:1002060; rev:1)
alert tcp any any -> any any (msg:"CFDP"; appid:cfdp; sid:1002061; rev:1)
alert tcp any any -> any any (msg:"Collaborator"; appid:collaborator; sid:1002062; rev:1)
alert tcp any any -> any any (msg:"Commerce"; appid:commerce; sid:1002063; rev:1)
alert tcp any any -> any any (msg:"Common Trace Facility"; appid:common_trace_facility; sid:1002064; rev:1)
alert tcp any any -> any any (msg:"Covia"; appid:covia; sid:1002065; rev:1)
alert tcp any any -> any any (msg:"CDDB"; appid:cddb; sid:1002066; rev:1)
alert tcp any any -> any any (msg:"CDDB"; appid:cpq-wbem; sid:1002067; rev:1)
alert tcp any any -> any any (msg:"CA Intl License Server"; appid:ca_intl_license_server; sid:1002068; rev:1)
alert tcp any any -> any any (msg:"Synergy"; appid:synergy; sid:1002069; rev:1)
alert tcp any any -> any any (msg:"CSTA"; appid:csta; sid:1002070; rev:1)
alert tcp any any -> any any (msg:"CSTA"; appid:con; sid:1002071; rev:1)
alert tcp any any -> any any (msg:"CSTA"; appid:contentserver; sid:1002072; rev:1)
alert tcp any any -> any any (msg:"Corerjd"; appid:corerjd; sid:1002073; rev:1)
alert tcp any any -> any any (msg:"Courier Mail Server"; appid:courier_mail_server; sid:1002074; rev:1)
alert tcp any any -> any any (msg:"Cray Network Semaphore server"; appid:cray_network_semaphore_server; sid:1002075; rev:1)
alert tcp any any -> any any (msg:"SFS config server"; appid:sfs_config_server; sid:1002076; rev:1)
alert tcp any any -> any any (msg:"Cray Unified Resource Manager"; appid:cray_unified_resource_manager; sid:1002077; rev:1)
alert tcp any any -> any any (msg:"Creative Partner"; appid:creative_partner; sid:1002078; rev:1)
alert tcp any any -> any any (msg:"Creative Server"; appid:creative_server; sid:1002079; rev:1)
alert tcp any any -> any any (msg:"CRYPTOAdmin"; appid:cryptoadmin; sid:1002080; rev:1)
alert tcp any any -> any any (msg:"CSNET Mailbox Name Nameserver"; appid:csnet_mailbox_name_nameserver; sid:1002081; rev:1)
alert tcp any any -> any any (msg:"Customer Ixchange"; appid:customer_ixchange; sid:1002082; rev:1)
alert tcp any any -> any any (msg:"Customer Ixchange"; appid:cvc_hostd; sid:1002083; rev:1)
alert tcp any any -> any any (msg:"CVS pserver"; appid:cvs_pserver; sid:1002084; rev:1)
alert tcp any any -> any any (msg:"Cybercash"; appid:cybercash; sid:1002085; rev:1)
alert tcp any any -> any any (msg:"Cybercash"; appid:cycleserv; sid:1002086; rev:1)
alert tcp any any -> any any (msg:"Cybercash"; appid:cycleserv2; sid:1002087; rev:1)
alert tcp any any -> any any (msg:"Retrospect"; appid:retrospect; sid:1002088; rev:1)
alert tcp any any -> any any (msg:"DataRamp Svr"; appid:dataramp_svr; sid:1002089; rev:1)
alert tcp any any -> any any (msg:"DataRampSrvSec"; appid:datarampsrvsec; sid:1002090; rev:1)
alert tcp any any -> any any (msg:"Epmap"; appid:epmap; sid:1002091; rev:1)
alert tcp any any -> any any (msg:"Epmap"; appid:dctp; sid:1002092; rev:1)
alert tcp any any -> any any (msg:"DDM DFM"; appid:ddm_dfm; sid:1002093; rev:1)
alert tcp any any -> any any (msg:"DDM RRDA"; appid:ddm_rrda; sid:1002094; rev:1)
alert tcp any any -> any any (msg:"DEC DLM"; appid:dec_dlm; sid:1002095; rev:1)
alert tcp any any -> any any (msg:"DEC DLM"; appid:decap; sid:1002096; rev:1)
alert tcp any any -> any any (msg:"Decbsrv"; appid:decbsrv; sid:1002097; rev:1)
alert tcp any any -> any any (msg:"DEI-ICDA"; appid:dei-icda; sid:1002098; rev:1)
alert tcp any any -> any any (msg:"Desknet's"; appid:desknet's; sid:1002099; rev:1)
alert tcp any any -> any any (msg:"Desknet's"; appid:device; sid:1002100; rev:1)
alert tcp any any -> any any (msg:"DHCP Failover"; appid:dhcp_failover; sid:1002101; rev:1)
alert tcp any any -> any any (msg:"DHCP Failover 2"; appid:dhcp_failover_2; sid:1002102; rev:1)
alert tcp any any -> any any (msg:"DHCP Failover 2"; appid:digital-vrc; sid:1002103; rev:1)
alert tcp any any -> any any (msg:"Direct TV Software Updates"; appid:direct_tv_software_updates; sid:1002104; rev:1)
alert tcp any any -> any any (msg:"Direct TV Tickers"; appid:direct_tv_tickers; sid:1002105; rev:1)
alert tcp any any -> any any (msg:"DirectPlay"; appid:directplay; sid:1002106; rev:1)
alert tcp any any -> any any (msg:"DirectPlay8"; appid:directplay8; sid:1002107; rev:1)
alert tcp any any -> any any (msg:"DirecTV Data Catalog"; appid:directv_data_catalog; sid:1002108; rev:1)
alert tcp any any -> any any (msg:"DirecTV Webcasting"; appid:directv_webcasting; sid:1002109; rev:1)
alert tcp any any -> any any (msg:"DirecTV Webcasting"; appid:distcc; sid:1002110; rev:1)
alert tcp any any -> any any (msg:"DDM"; appid:ddm; sid:1002111; rev:1)
alert tcp any any -> any any (msg:"DOOM"; appid:doom; sid:1002112; rev:1)
alert tcp any any -> any any (msg:"DWR"; appid:dwr; sid:1002113; rev:1)
alert tcp any any -> any any (msg:"eDonkey Static"; appid:edonkey_static; sid:1002114; rev:1)
alert tcp any any -> any any (msg:"EMC SmartPackets"; appid:emc_smartpackets; sid:1002115; rev:1)
alert tcp any any -> any any (msg:"EMC SmartPackets"; appid:entomb; sid:1002116; rev:1)
alert tcp any any -> any any (msg:"Entrust Administration Service Handler"; appid:entrust_administration_service_handler; sid:1002117; rev:1)
alert tcp any any -> any any (msg:"Entrust-KMSH"; appid:entrust-kmsh; sid:1002118; rev:1)
alert tcp any any -> any any (msg:"Entrust SPS"; appid:entrust_sps; sid:1002119; rev:1)
alert tcp any any -> any any (msg:"Entrust SPS"; appid:entrust-aaas; sid:1002120; rev:1)
alert tcp any any -> any any (msg:"Entrust SPS"; appid:entrust-aams; sid:1002121; rev:1)
alert tcp any any -> any any (msg:"Entrust SPS"; appid:errlog copy/server daemon; sid:1002122; rev:1)
alert tcp any any -> any any (msg:"ESCP"; appid:escp; sid:1002123; rev:1)
alert tcp any any -> any any (msg:"eSignal"; appid:esignal; sid:1002124; rev:1)
alert tcp any any -> any any (msg:"XTP"; appid:xtp; sid:1002125; rev:1)
alert tcp any any -> any any (msg:"FCP"; appid:fcp; sid:1002126; rev:1)
alert tcp any any -> any any (msg:"FLEXlm"; appid:flexlm; sid:1002127; rev:1)
alert tcp any any -> any any (msg:"FTP Software Agent System"; appid:ftp_software_agent_system; sid:1002128; rev:1)
alert tcp any any -> any any (msg:"Fujitsu Device Control"; appid:fujitsu_device_control; sid:1002129; rev:1)
alert tcp any any -> any any (msg:"Fujitsu Device Control"; appid:gdomap; sid:1002130; rev:1)
alert tcp any any -> any any (msg:"GDS DataBase"; appid:gds_database; sid:1002131; rev:1)
alert tcp any any -> any any (msg:"GDS DataBase"; appid:ginad; sid:1002132; rev:1)
alert tcp any any -> any any (msg:"GSI-FTP"; appid:gsi-ftp; sid:1002133; rev:1)
alert tcp any any -> any any (msg:"GNU Generation Foundation NCP 678"; appid:gnu_gen_678; sid:1002134; rev:1)
alert tcp any any -> any any (msg:"GKrellM"; appid:gkrellm; sid:1002135; rev:1)
alert tcp any any -> any any (msg:"GoBoogy"; appid:goboogy; sid:1002136; rev:1)
alert tcp any any -> any any (msg:"GotoDevice"; appid:gotodevice; sid:1002137; rev:1)
alert tcp any any -> any any (msg:"Graphics"; appid:graphics; sid:1002138; rev:1)
alert tcp any any -> any any (msg:"GraphOn Login"; appid:graphon_login; sid:1002139; rev:1)
alert tcp any any -> any any (msg:"Groove"; appid:groove; sid:1002140; rev:1)
alert tcp any any -> any any (msg:"Groove"; appid:ha-cluster; sid:1002141; rev:1)
alert tcp any any -> any any (msg:"Hardware Control Protocol Wismar"; appid:hardware_control_protocol_wismar; sid:1002142; rev:1)
alert tcp any any -> any any (msg:"HELLO Port"; appid:hello_port; sid:1002143; rev:1)
alert tcp any any -> any any (msg:"Heroix Longitude"; appid:heroix_longitude; sid:1002144; rev:1)
alert tcp any any -> any any (msg:"Hitachi Universal Storage Platform"; appid:hitachi_universal_storage_platform; sid:1002145; rev:1)
alert tcp any any -> any any (msg:"HMMP Indication"; appid:hmmp_indication; sid:1002146; rev:1)
alert tcp any any -> any any (msg:"HMMP Operation"; appid:hmmp_operation; sid:1002147; rev:1)
alert tcp any any -> any any (msg:"HAP"; appid:hap; sid:1002148; rev:1)
alert tcp any any -> any any (msg:"HP Network Management Center"; appid:hp_network_management_center; sid:1002149; rev:1)
alert tcp any any -> any any (msg:"HTTP RPC Ep Map"; appid:http_rpc_ep_map; sid:1002150; rev:1)
alert tcp any any -> any any (msg:"Hybrid Point of Presence"; appid:hybrid_point_of_presence; sid:1002151; rev:1)
alert tcp any any -> any any (msg:"Hyperwave-ISP"; appid:hyperwave-isp; sid:1002152; rev:1)
alert tcp any any -> any any (msg:"Hyperwave-ISP"; appid:iafdbase; sid:1002153; rev:1)
alert tcp any any -> any any (msg:"IAFServer"; appid:iafserver; sid:1002154; rev:1)
alert tcp any any -> any any (msg:"IBM Director"; appid:ibm_director; sid:1002155; rev:1)
alert tcp any any -> any any (msg:"IBM NetView DM"; appid:ibm_netview_dm; sid:1002156; rev:1)
alert tcp any any -> any any (msg:"IBM NetView DM/6000 Server/Client"; appid:ibm_netview_dm/6000_server/client; sid:1002157; rev:1)
alert tcp any any -> any any (msg:"ICL coNETion locate server"; appid:icl_conetion_locate_server; sid:1002158; rev:1)
alert tcp any any -> any any (msg:"ICL coNETion server info"; appid:icl_conetion_server_info; sid:1002159; rev:1)
alert tcp any any -> any any (msg:"ICL coNETion server info"; appid:idfp; sid:1002160; rev:1)
alert tcp any any -> any any (msg:"IEEE-MMS-SSL"; appid:ieee-mms-ssl; sid:1002161; rev:1)
alert tcp any any -> any any (msg:"IMP Logical Address Maintenance"; appid:imp_logical_address_maintenance; sid:1002162; rev:1)
alert tcp any any -> any any (msg:"Intecourier"; appid:intecourier; sid:1002163; rev:1)
alert tcp any any -> any any (msg:"Integra Software Management Environment"; appid:integra_software_management_environment; sid:1002164; rev:1)
alert tcp any any -> any any (msg:"IBP"; appid:ibp; sid:1002165; rev:1)
alert tcp any any -> any any (msg:"Internet Configuration Manager"; appid:internet_configuration_manager; sid:1002166; rev:1)
alert tcp any any -> any any (msg:"Internet telephony tool"; appid:internet_telephony_tool; sid:1002167; rev:1)
alert tcp any any -> any any (msg:"CU-SeeMe"; appid:cu-seeme; sid:1002168; rev:1)
alert tcp any any -> any any (msg:"IPX over UDP"; appid:ipx_over_udp; sid:1002169; rev:1)
alert tcp any any -> any any (msg:"IPX over UDP"; appid:intrinsa; sid:1002170; rev:1)
alert tcp any any -> any any (msg:"IPX over UDP"; appid:ipcd; sid:1002171; rev:1)
alert tcp any any -> any any (msg:"IPX over UDP"; appid:ipdd; sid:1002172; rev:1)
alert tcp any any -> any any (msg:"Kali"; appid:kali; sid:1002173; rev:1)
alert tcp any any -> any any (msg:"IRC-SERV"; appid:irc-serv; sid:1002174; rev:1)
alert tcp any any -> any any (msg:"ISO ILL Protocol"; appid:iso_ill_protocol; sid:1002175; rev:1)
alert tcp any any -> any any (msg:"ISO Transport Class 2 Non-Control over TCP"; appid:iso_transport_class_2_non-control_over_tcp; sid:1002176; rev:1)
alert tcp any any -> any any (msg:"ISO-TP0"; appid:iso-tp0; sid:1002177; rev:1)
alert tcp any any -> any any (msg:"ISO-TP0"; appid:itm-mcell-s; sid:1002178; rev:1)
alert tcp any any -> any any (msg:"Kerberos Administration"; appid:kerberos_administration; sid:1002179; rev:1)
alert tcp any any -> any any (msg:"Key Server"; appid:key_server; sid:1002180; rev:1)
alert tcp any any -> any any (msg:"Klogin"; appid:klogin; sid:1002181; rev:1)
alert tcp any any -> any any (msg:"Konspire2b"; appid:konspire2b; sid:1002182; rev:1)
alert tcp any any -> any any (msg:"Konspire2b"; appid:kpasswd; sid:1002183; rev:1)
alert tcp any any -> any any (msg:"Konspire2b"; appid:kshell; sid:1002184; rev:1)
alert tcp any any -> any any (msg:"LDP"; appid:ldp; sid:1002185; rev:1)
alert tcp any any -> any any (msg:"LDP"; appid:lanserver; sid:1002186; rev:1)
alert tcp any any -> any any (msg:"LWAPP"; appid:lwapp; sid:1002187; rev:1)
alert tcp any any -> any any (msg:"LWAPP"; appid:ljk-login; sid:1002188; rev:1)
alert tcp any any -> any any (msg:"Locus PC-Interface Conn Server"; appid:locus_pc-interface_conn_server; sid:1002189; rev:1)
alert tcp any any -> any any (msg:"Loglogic"; appid:loglogic; sid:1002190; rev:1)
alert tcp any any -> any any (msg:"MacOS Server Admin"; appid:macos_server_admin; sid:1002191; rev:1)
alert tcp any any -> any any (msg:"MSA"; appid:msa; sid:1002192; rev:1)
alert tcp any any -> any any (msg:"Mailbox-LM"; appid:mailbox-lm; sid:1002193; rev:1)
alert tcp any any -> any any (msg:"Mailbox-LM"; appid:maitrd; sid:1002194; rev:1)
alert tcp any any -> any any (msg:"Management Utility"; appid:management_utility; sid:1002195; rev:1)
alert tcp any any -> any any (msg:"Management Utility"; appid:mcns-sec; sid:1002196; rev:1)
alert tcp any any -> any any (msg:"Management Utility"; appid:mdc-portmapper; sid:1002197; rev:1)
alert tcp any any -> any any (msg:"Memcomm"; appid:memcomm; sid:1002198; rev:1)
alert tcp any any -> any any (msg:"Meregister"; appid:meregister; sid:1002199; rev:1)
alert tcp any any -> any any (msg:"Meter"; appid:meter; sid:1002200; rev:1)
alert tcp any any -> any any (msg:"Meter"; appid:micom-pfs; sid:1002201; rev:1)
alert tcp any any -> any any (msg:"Micromuse-lm"; appid:micromuse-lm; sid:1002202; rev:1)
alert tcp any any -> any any (msg:"Microsoft Global Catalog"; appid:microsoft_global_catalog; sid:1002203; rev:1)
alert tcp any any -> any any (msg:"Microsoft Rome"; appid:microsoft_rome; sid:1002204; rev:1)
alert tcp any any -> any any (msg:"Microsoft Shuttle"; appid:microsoft_shuttle; sid:1002205; rev:1)
alert tcp any any -> any any (msg:"Microsoft System Center Operations Manager"; appid:microsoft_system_center_operations_manager; sid:1002206; rev:1)
alert tcp any any -> any any (msg:"MIT ML Device"; appid:mit_ml_device; sid:1002207; rev:1)
alert tcp any any -> any any (msg:"MobilIP-MN"; appid:mobilip-mn; sid:1002208; rev:1)
alert tcp any any -> any any (msg:"Mobility XE protocol"; appid:mobility_xe_protocol; sid:1002209; rev:1)
alert tcp any any -> any any (msg:"Mondex"; appid:mondex; sid:1002210; rev:1)
alert tcp any any -> any any (msg:"Monitor"; appid:monitor; sid:1002211; rev:1)
alert tcp any any -> any any (msg:"MPM FLAGS Protocol"; appid:mpm_flags_protocol; sid:1002212; rev:1)
alert tcp any any -> any any (msg:"MS Exchange Routing"; appid:ms_exchange_routing; sid:1002213; rev:1)
alert tcp any any -> any any (msg:"MS Exchange Routing"; appid:msg-icp; sid:1002214; rev:1)
alert tcp any any -> any any (msg:"Bundle Discovery Protocol"; appid:bundle_discovery_protocol; sid:1002215; rev:1)
alert tcp any any -> any any (msg:"MRM"; appid:mrm; sid:1002216; rev:1)
alert tcp any any -> any any (msg:"Multiling HTTP"; appid:multiling_http; sid:1002217; rev:1)
alert tcp any any -> any any (msg:"Mylex-mapd"; appid:mylex-mapd; sid:1002218; rev:1)
alert tcp any any -> any any (msg:"Nest Protocol"; appid:nest_protocol; sid:1002219; rev:1)
alert tcp any any -> any any (msg:"netGW"; appid:netgw; sid:1002220; rev:1)
alert tcp any any -> any any (msg:"Netix MPP"; appid:netix_mpp; sid:1002221; rev:1)
alert tcp any any -> any any (msg:"Netnews"; appid:netnews; sid:1002222; rev:1)
alert tcp any any -> any any (msg:"Netnews Administration System"; appid:netnews_administration_system; sid:1002223; rev:1)
alert tcp any any -> any any (msg:"Netop Remote Control"; appid:netop_remote_control; sid:1002224; rev:1)
alert tcp any any -> any any (msg:"Network based Rev. Cont. Sys."; appid:network_based_rev._cont._sys.; sid:1002225; rev:1)
alert tcp any any -> any any (msg:"Network Innovations Multiplex"; appid:network_innovations_multiplex; sid:1002226; rev:1)
alert tcp any any -> any any (msg:"Nmap"; appid:nmap; sid:1002227; rev:1)
alert tcp any any -> any any (msg:"NQS"; appid:nqs; sid:1002228; rev:1)
alert tcp any any -> any any (msg:"Network Systems"; appid:network_systems; sid:1002229; rev:1)
alert tcp any any -> any any (msg:"Networked Media Streaming Protocol"; appid:networked_media_streaming_protocol; sid:1002230; rev:1)
alert tcp any any -> any any (msg:"New who"; appid:new_who; sid:1002231; rev:1)
alert tcp any any -> any any (msg:"NFS Lock Daemon Manager"; appid:nfs_lock_daemon_manager; sid:1002232; rev:1)
alert tcp any any -> any any (msg:"NFS Lock Daemon Manager"; appid:nlogin; sid:1002233; rev:1)
alert tcp any any -> any any (msg:"Novadigm EDM"; appid:novadigm_edm; sid:1002234; rev:1)
alert tcp any any -> any any (msg:"Novell Netware over IP"; appid:novell_netware_over_ip; sid:1002235; rev:1)
alert tcp any any -> any any (msg:"NPMP Trap"; appid:npmp_trap; sid:1002236; rev:1)
alert tcp any any -> any any (msg:"NPMP Trap"; appid:npmp-gui; sid:1002237; rev:1)
alert tcp any any -> any any (msg:"NPMP Trap"; appid:npmp-local; sid:1002238; rev:1)
alert tcp any any -> any any (msg:"NSW User System FE"; appid:nsw_user_system_fe; sid:1002239; rev:1)
alert tcp any any -> any any (msg:"OBEX"; appid:obex; sid:1002240; rev:1)
alert tcp any any -> any any (msg:"OCS_CMU"; appid:ocs_cmu; sid:1002241; rev:1)
alert tcp any any -> any any (msg:"Ohimsrv"; appid:ohimsrv; sid:1002242; rev:1)
alert tcp any any -> any any (msg:"Omginitialrefs"; appid:omginitialrefs; sid:1002243; rev:1)
alert tcp any any -> any any (msg:"Omserv"; appid:omserv; sid:1002244; rev:1)
alert tcp any any -> any any (msg:"Omserv"; appid:opalis-rdv; sid:1002245; rev:1)
alert tcp any any -> any any (msg:"Omserv"; appid:openvms-sysipc; sid:1002246; rev:1)
alert tcp any any -> any any (msg:"Operations Manager - Health Service"; appid:operations_manager_-_health_service; sid:1002247; rev:1)
alert tcp any any -> any any (msg:"Operations Manager - Health Service"; appid:oracle; sid:1002248; rev:1)
alert tcp any any -> any any (msg:"Oracle coauthor"; appid:oracle_coauthor; sid:1002249; rev:1)
alert tcp any any -> any any (msg:"Oracle Names"; appid:oracle_names; sid:1002250; rev:1)
alert tcp any any -> any any (msg:"Oracle Net8 Cman"; appid:oracle_net8_cma; sid:1002251; rev:1)
alert tcp any any -> any any (msg:"Oracle Net8 CMan Admin"; appid:oracle_net8_adm; sid:1002252; rev:1)
alert tcp any any -> any any (msg:"Oracle TCP/IP Listener"; appid:oracle_tcp/ip_listener; sid:1002253; rev:1)
alert tcp any any -> any any (msg:"Orbix 2000 Config"; appid:orbix_2000_config; sid:1002254; rev:1)
alert tcp any any -> any any (msg:"Orbix 2000 Locator"; appid:orbix_2000_loc; sid:1002255; rev:1)
alert tcp any any -> any any (msg:"Orbix 2000 Locator over SSL"; appid:orbix_2000_ssl; sid:1002256; rev:1)
alert tcp any any -> any any (msg:"P10"; appid:p10; sid:1002257; rev:1)
alert tcp any any -> any any (msg:"Parsec Gameserver"; appid:parsec_gameserver; sid:1002258; rev:1)
alert tcp any any -> any any (msg:"PassGo Technologies Service"; appid:passgo_technologies_service; sid:1002259; rev:1)
alert tcp any any -> any any (msg:"Password Change"; appid:password_change; sid:1002260; rev:1)
alert tcp any any -> any any (msg:"PDL data streaming port"; appid:pdl_data_streaming_port; sid:1002261; rev:1)
alert tcp any any -> any any (msg:"POV-Ray"; appid:pov-ray; sid:1002262; rev:1)
alert tcp any any -> any any (msg:"Personal Link"; appid:personal_link; sid:1002263; rev:1)
alert tcp any any -> any any (msg:"Pharos psrserver"; appid:pharos_psrserver; sid:1002264; rev:1)
alert tcp any any -> any any (msg:"Philips Video-Conferencing"; appid:philips_video-conferencing; sid:1002265; rev:1)
alert tcp any any -> any any (msg:"Phonebook"; appid:phonebook; sid:1002266; rev:1)
alert tcp any any -> any any (msg:"Photuris"; appid:photuris; sid:1002267; rev:1)
alert tcp any any -> any any (msg:"PIM-RP-DISC"; appid:pim-rp-disc; sid:1002268; rev:1)
alert tcp any any -> any any (msg:"PIM-RP-DISC"; appid:pirp; sid:1002269; rev:1)
alert tcp any any -> any any (msg:"Plus Fives MUMPS"; appid:plus_fives_mumps; sid:1002270; rev:1)
alert tcp any any -> any any (msg:"PTP Event"; appid:ptp_event; sid:1002271; rev:1)
alert tcp any any -> any any (msg:"PAPI"; appid:papi; sid:1002272; rev:1)
alert tcp any any -> any any (msg:"PRM Node Man"; appid:prm_node_man; sid:1002273; rev:1)
alert tcp any any -> any any (msg:"PRM Sys Man"; appid:prm_sys_man; sid:1002274; rev:1)
alert tcp any any -> any any (msg:"PTC Name Service"; appid:ptc_name_service; sid:1002275; rev:1)
alert tcp any any -> any any (msg:"PTP General"; appid:ptp_general; sid:1002276; rev:1)
alert tcp any any -> any any (msg:"PTP General"; appid:pump; sid:1002277; rev:1)
alert tcp any any -> any any (msg:"PureNoise"; appid:purenoise; sid:1002278; rev:1)
alert tcp any any -> any any (msg:"PureNoise"; appid:qrh; sid:1002279; rev:1)
alert tcp any any -> any any (msg:"QMQP"; appid:qmqp; sid:1002280; rev:1)
alert tcp any any -> any any (msg:"Quotad"; appid:quotad; sid:1002281; rev:1)
alert tcp any any -> any any (msg:"Radio Control Protocol"; appid:radio_control_protocol; sid:1002282; rev:1)
alert tcp any any -> any any (msg:"Rational Method Composer"; appid:rational_method_composer; sid:1002283; rev:1)
alert tcp any any -> any any (msg:"Radmin"; appid:radmin; sid:1002284; rev:1)
alert tcp any any -> any any (msg:"RDA"; appid:rda; sid:1002285; rev:1)
alert tcp any any -> any any (msg:"RMCP"; appid:rmcp; sid:1002286; rev:1)
alert tcp any any -> any any (msg:"Remote Method Invocation Activation"; appid:remote_method_invocation_activation; sid:1002287; rev:1)
alert tcp any any -> any any (msg:"Remote Method Invocation Activation"; appid:rmtis; sid:1002288; rev:1)
alert tcp any any -> any any (msg:"Remote-KIS"; appid:remote-kis; sid:1002289; rev:1)
alert tcp any any -> any any (msg:"RemoteFS"; appid:remotefs; sid:1002290; rev:1)
alert tcp any any -> any any (msg:"RemoteFS"; appid:repcmd; sid:1002291; rev:1)
alert tcp any any -> any any (msg:"RemoteFS"; appid:repscmd; sid:1002292; rev:1)
alert tcp any any -> any any (msg:"RRH"; appid:rrh; sid:1002293; rev:1)
alert tcp any any -> any any (msg:"RLZ Dbase"; appid:rlz_dbase; sid:1002294; rev:1)
alert tcp any any -> any any (msg:"RLZ Dbase"; appid:rmiregistry; sid:1002295; rev:1)
alert tcp any any -> any any (msg:"Rmonitor"; appid:rmonitor; sid:1002296; rev:1)
alert tcp any any -> any any (msg:"Rmonitor"; appid:netvmg-traceroute; sid:1002297; rev:1)
alert tcp any any -> any any (msg:"RSVP Tunnel"; appid:rsvp_tunnel; sid:1002298; rev:1)
alert tcp any any -> any any (msg:"RSVP Tunnel"; appid:rtip; sid:1002299; rev:1)
alert tcp any any -> any any (msg:"RUSHD"; appid:rushd; sid:1002300; rev:1)
alert tcp any any -> any any (msg:"Russell Info Sci Calendar Manager"; appid:russell_info_sci_calendar_manager; sid:1002301; rev:1)
alert tcp any any -> any any (msg:"Russell Info Sci Calendar Manager"; appid:rxe; sid:1002302; rev:1)
alert tcp any any -> any any (msg:"SANity"; appid:sanity; sid:1002303; rev:1)
alert tcp any any -> any any (msg:"SAP"; appid:sap; sid:1002304; rev:1)
alert tcp any any -> any any (msg:"SCC Security"; appid:scc_security; sid:1002305; rev:1)
alert tcp any any -> any any (msg:"SCO Desktop Administration Server"; appid:sco_desktop_administration_server; sid:1002306; rev:1)
alert tcp any any -> any any (msg:"SCO System Administration Server"; appid:sco_system_administration_server; sid:1002307; rev:1)
alert tcp any any -> any any (msg:"SCO Web Server Manager 3"; appid:sco_web_server_manager_3; sid:1002308; rev:1)
alert tcp any any -> any any (msg:"SCO WebServer Manager"; appid:sco_webserver_manager; sid:1002309; rev:1)
alert tcp any any -> any any (msg:"SCO WebServer Manager"; appid:scohelp; sid:1002310; rev:1)
alert tcp any any -> any any (msg:"SST"; appid:sst; sid:1002311; rev:1)
alert tcp any any -> any any (msg:"SST"; appid:scx-proxy; sid:1002312; rev:1)
alert tcp any any -> any any (msg:"SDNS-KMP"; appid:sdns-kmp; sid:1002313; rev:1)
alert tcp any any -> any any (msg:"SILC"; appid:silc; sid:1002314; rev:1)
alert tcp any any -> any any (msg:"Secure IRC"; appid:secure_irc; sid:1002315; rev:1)
alert tcp any any -> any any (msg:"SMID"; appid:smid; sid:1002316; rev:1)
alert tcp any any -> any any (msg:"SNNTP"; appid:snntp; sid:1002317; rev:1)
alert tcp any any -> any any (msg:"SIFT"; appid:sift; sid:1002318; rev:1)
alert tcp any any -> any any (msg:"SIFT"; appid:srvloc; sid:1002319; rev:1)
alert tcp any any -> any any (msg:"sFlow"; appid:sflow; sid:1002320; rev:1)
alert tcp any any -> any any (msg:"Siam"; appid:siam; sid:1002321; rev:1)
alert tcp any any -> any any (msg:"SAFT"; appid:saft; sid:1002322; rev:1)
alert tcp any any -> any any (msg:"SNTP-HEARTBEAT"; appid:sntp-heartbeat; sid:1002323; rev:1)
alert tcp any any -> any any (msg:"Sitara Dir"; appid:sitara_dir; sid:1002324; rev:1)
alert tcp any any -> any any (msg:"Sitara Management"; appid:sitara_management; sid:1002325; rev:1)
alert tcp any any -> any any (msg:"Sitara Server"; appid:sitara_server; sid:1002326; rev:1)
alert tcp any any -> any any (msg:"Skronk"; appid:skronk; sid:1002327; rev:1)
alert tcp any any -> any any (msg:"Skronk"; appid:smpnameres; sid:1002328; rev:1)
alert tcp any any -> any any (msg:"Skronk"; appid:smsd; sid:1002329; rev:1)
alert tcp any any -> any any (msg:"Softros LAN Messenger"; appid:softros_lan_messenger; sid:1002330; rev:1)
alert tcp any any -> any any (msg:"Sonar"; appid:sonar; sid:1002331; rev:1)
alert tcp any any -> any any (msg:"SURF"; appid:surf; sid:1002332; rev:1)
alert tcp any any -> any any (msg:"SPMP"; appid:spmp; sid:1002333; rev:1)
alert tcp any any -> any any (msg:"SPMP"; appid:spsc; sid:1002334; rev:1)
alert tcp any any -> any any (msg:"SPMP"; appid:ss7ns; sid:1002335; rev:1)
alert tcp any any -> any any (msg:"STMF"; appid:stmf; sid:1002336; rev:1)
alert tcp any any -> any any (msg:"Stock IXChange"; appid:stock_ixchange; sid:1002337; rev:1)
alert tcp any any -> any any (msg:"Stock IXChange"; appid:streettalk; sid:1002338; rev:1)
alert tcp any any -> any any (msg:"STUN over TLS"; appid:stun_over_tls; sid:1002339; rev:1)
alert tcp any any -> any any (msg:"Submit Protocol"; appid:submit_protocol; sid:1002340; rev:1)
alert tcp any any -> any any (msg:"SUBNTBCST_TFTP"; appid:subntbcst_tftp; sid:1002341; rev:1)
alert tcp any any -> any any (msg:"Sun IPC server"; appid:sun_ipc_server; sid:1002342; rev:1)
alert tcp any any -> any any (msg:"SUNDR"; appid:sundr; sid:1002343; rev:1)
alert tcp any any -> any any (msg:"Survey Measurement"; appid:survey_measurement; sid:1002344; rev:1)
alert tcp any any -> any any (msg:"SRVFP"; appid:srvfp; sid:1002345; rev:1)
alert tcp any any -> any any (msg:"SynOptics SNMP Relay"; appid:synoptics_snmp_relay; sid:1002346; rev:1)
alert tcp any any -> any any (msg:"SynOptics Trap"; appid:synoptics_trap; sid:1002347; rev:1)
alert tcp any any -> any any (msg:"SNARE"; appid:snare; sid:1002348; rev:1)
alert tcp any any -> any any (msg:"BB"; appid:bb; sid:1002349; rev:1)
alert tcp any any -> any any (msg:"TDP"; appid:tdp; sid:1002350; rev:1)
alert tcp any any -> any any (msg:"TeamSound"; appid:teamsound; sid:1002351; rev:1)
alert tcp any any -> any any (msg:"Technical Analysis Software"; appid:technical_analysis_software; sid:1002352; rev:1)
alert tcp any any -> any any (msg:"Teedtap"; appid:teedtap; sid:1002353; rev:1)
alert tcp any any -> any any (msg:"Teedtap"; appid:tell; sid:1002354; rev:1)
alert tcp any any -> any any (msg:"TenFold"; appid:tenfold; sid:1002355; rev:1)
alert tcp any any -> any any (msg:"TESLA System Messaging"; appid:tesla_system_messaging; sid:1002356; rev:1)
alert tcp any any -> any any (msg:"TIA/EIA/IS-99 modem client"; appid:tia/eia/is-99_modem_client; sid:1002357; rev:1)
alert tcp any any -> any any (msg:"TIA/EIA/IS-99 modem server"; appid:tia/eia/is-99_modem_server; sid:1002358; rev:1)
alert tcp any any -> any any (msg:"Timeserver"; appid:timeserver; sid:1002359; rev:1)
alert tcp any any -> any any (msg:"Timeserver"; appid:tinc; sid:1002360; rev:1)
alert tcp any any -> any any (msg:"TNS CML"; appid:tns_cml; sid:1002361; rev:1)
alert tcp any any -> any any (msg:"Tobit David Replica"; appid:tobit_david_replica; sid:1002362; rev:1)
alert tcp any any -> any any (msg:"TPIP"; appid:tpip; sid:1002363; rev:1)
alert tcp any any -> any any (msg:"Transport Independent Convergence"; appid:transport_independent_convergence; sid:1002364; rev:1)
alert tcp any any -> any any (msg:"Transport Independent Convergence"; appid:trin00; sid:1002365; rev:1)
alert tcp any any -> any any (msg:"Ulpnet"; appid:ulpnet; sid:1002366; rev:1)
alert tcp any any -> any any (msg:"Unix time"; appid:unix_time; sid:1002367; rev:1)
alert tcp any any -> any any (msg:"User Location Protocol"; appid:user_location_protocol; sid:1002368; rev:1)
alert tcp any any -> any any (msg:"UTMPCD"; appid:utmpcd; sid:1002369; rev:1)
alert tcp any any -> any any (msg:"UTMPCD"; appid:utmpsd; sid:1002370; rev:1)
alert tcp any any -> any any (msg:"UTMPCD"; appid:uuidgen; sid:1002371; rev:1)
alert tcp any any -> any any (msg:"VACDSM-APP"; appid:vacdsm-app; sid:1002372; rev:1)
alert tcp any any -> any any (msg:"VACDSM-SWS"; appid:vacdsm-sws; sid:1002373; rev:1)
alert tcp any any -> any any (msg:"VATP"; appid:vatp; sid:1002374; rev:1)
alert tcp any any -> any any (msg:"VATP"; appid:vemmi; sid:1002375; rev:1)
alert tcp any any -> any any (msg:"Vid"; appid:vid; sid:1002376; rev:1)
alert tcp any any -> any any (msg:"Videotex"; appid:videotex; sid:1002377; rev:1)
alert tcp any any -> any any (msg:"Virtual Presence Protocol"; appid:virtual_presence_protocol; sid:1002378; rev:1)
alert tcp any any -> any any (msg:"VMware Fault Domain Manager"; appid:vmware_fault_domain_manager; sid:1002379; rev:1)
alert tcp any any -> any any (msg:"VMware Fault Domain Manager"; appid:vnas; sid:1002380; rev:1)
alert tcp any any -> any any (msg:"VPPS-Via"; appid:vpps-via; sid:1002381; rev:1)
alert tcp any any -> any any (msg:"VPPS-Via"; appid:vsinet; sid:1002382; rev:1)
alert tcp any any -> any any (msg:"VVPS-Qua"; appid:vvps-qua; sid:1002383; rev:1)
alert tcp any any -> any any (msg:"WAP connectionless session service"; appid:wap_connectionless_session_service; sid:1002384; rev:1)
alert tcp any any -> any any (msg:"WAP Push"; appid:wap_push; sid:1002385; rev:1)
alert tcp any any -> any any (msg:"WAP Push OTA-HTTP port"; appid:wap_push_ota_po; sid:1002386; rev:1)
alert tcp any any -> any any (msg:"WAP Push OTA-HTTP secure"; appid:wap_push_ota_se; sid:1002387; rev:1)
alert tcp any any -> any any (msg:"WAP Push Secure"; appid:wap_push_secure; sid:1002388; rev:1)
alert tcp any any -> any any (msg:"WAP secure connectionless session service"; appid:wap_secure_connectionless_session_service; sid:1002389; rev:1)
alert tcp any any -> any any (msg:"WAP Session Service Secure"; appid:wap_session_sec; sid:1002390; rev:1)
alert tcp any any -> any any (msg:"WAP Session Service"; appid:wap_session_ser; sid:1002391; rev:1)
alert tcp any any -> any any (msg:"WAP vCal"; appid:wap_vcal; sid:1002392; rev:1)
alert tcp any any -> any any (msg:"WAP vCal Secure"; appid:wap_vcal_secure; sid:1002393; rev:1)
alert tcp any any -> any any (msg:"WAP vCard"; appid:wap_vcard; sid:1002394; rev:1)
alert tcp any any -> any any (msg:"WAP vCard Secure"; appid:wap_vcard_secure; sid:1002395; rev:1)
alert tcp any any -> any any (msg:"War-rock"; appid:war-rock; sid:1002396; rev:1)
alert tcp any any -> any any (msg:"War-rock"; appid:whoami; sid:1002397; rev:1)
alert tcp any any -> any any (msg:"WLCCP"; appid:wlccp; sid:1002398; rev:1)
alert tcp any any -> any any (msg:"World Fusion"; appid:world_fusion; sid:1002399; rev:1)
alert tcp any any -> any any (msg:"World Fusion"; appid:wpgs; sid:1002400; rev:1)
alert tcp any any -> any any (msg:"World Fusion"; appid:xact-backup; sid:1002401; rev:1)
alert tcp any any -> any any (msg:"World Fusion"; appid:xvttp; sid:1002402; rev:1)
alert tcp any any -> any any (msg:"ICMP"; appid:icmp; sid:1002403; rev:1)
alert tcp any any -> any any (msg:"IP in IP"; appid:ip_in_ip; sid:1002404; rev:1)
alert tcp any any -> any any (msg:"ST"; appid:st; sid:1002405; rev:1)
alert tcp any any -> any any (msg:"CBT"; appid:cbt; sid:1002406; rev:1)
alert tcp any any -> any any (msg:"EGP"; appid:egp; sid:1002407; rev:1)
alert tcp any any -> any any (msg:"IGRP"; appid:igrp; sid:1002408; rev:1)
alert tcp any any -> any any (msg:"BBN RCC"; appid:bbn_rcc; sid:1002409; rev:1)
alert tcp any any -> any any (msg:"NVP"; appid:nvp; sid:1002410; rev:1)
alert tcp any any -> any any (msg:"Argus"; appid:argus; sid:1002411; rev:1)
alert tcp any any -> any any (msg:"Emission Control Protocol"; appid:emission_control_protocol; sid:1002412; rev:1)
alert tcp any any -> any any (msg:"Cross Net Debugger"; appid:cross_net_debugger; sid:1002413; rev:1)
alert tcp any any -> any any (msg:"CHAOSNet"; appid:chaosnet; sid:1002414; rev:1)
alert tcp any any -> any any (msg:"DCN Measurement Subsystems"; appid:dcn_measurement_subsystems; sid:1002415; rev:1)
alert tcp any any -> any any (msg:"HMP"; appid:hmp; sid:1002416; rev:1)
alert tcp any any -> any any (msg:"Packet Radio Measurement"; appid:packet_radio_measurement; sid:1002417; rev:1)
alert tcp any any -> any any (msg:"Trunk-1 Protocol"; appid:trunk-1_protocol; sid:1002418; rev:1)
alert tcp any any -> any any (msg:"Trunk-2 Protocol"; appid:trunk-2_protocol; sid:1002419; rev:1)
alert tcp any any -> any any (msg:"Leaf-1"; appid:leaf-1; sid:1002420; rev:1)
alert tcp any any -> any any (msg:"Leaf-2"; appid:leaf-2; sid:1002421; rev:1)
alert tcp any any -> any any (msg:"Reliable Datagram Protocol"; appid:reliable_datagram_protocol; sid:1002422; rev:1)
alert tcp any any -> any any (msg:"IRTP"; appid:irtp; sid:1002423; rev:1)
alert tcp any any -> any any (msg:"TP4"; appid:tp4; sid:1002424; rev:1)
alert tcp any any -> any any (msg:"NETBLT"; appid:netblt; sid:1002425; rev:1)
alert tcp any any -> any any (msg:"MFE"; appid:mfe; sid:1002426; rev:1)
alert tcp any any -> any any (msg:"TPCP"; appid:tpcp; sid:1002427; rev:1)
alert tcp any any -> any any (msg:"IDPR"; appid:idpr; sid:1002428; rev:1)
alert tcp any any -> any any (msg:"DDP"; appid:ddp; sid:1002429; rev:1)
alert tcp any any -> any any (msg:"IDPR Control Message"; appid:idpr_control_message; sid:1002430; rev:1)
alert tcp any any -> any any (msg:"TP++"; appid:tp++; sid:1002431; rev:1)
alert tcp any any -> any any (msg:"IL"; appid:il; sid:1002432; rev:1)
alert tcp any any -> any any (msg:"IPv6 encapsulation"; appid:ipv6_encapsulation; sid:1002433; rev:1)
alert tcp any any -> any any (msg:"SDRP"; appid:sdrp; sid:1002434; rev:1)
alert tcp any any -> any any (msg:"IDRP"; appid:idrp; sid:1002435; rev:1)
alert tcp any any -> any any (msg:"DSR"; appid:dsr; sid:1002436; rev:1)
alert tcp any any -> any any (msg:"BNA"; appid:bna; sid:1002437; rev:1)
alert tcp any any -> any any (msg:"BNA"; appid:i-nlsp; sid:1002438; rev:1)
alert tcp any any -> any any (msg:"Swipe"; appid:swipe; sid:1002439; rev:1)
alert tcp any any -> any any (msg:"NARP"; appid:narp; sid:1002440; rev:1)
alert tcp any any -> any any (msg:"IP Mobility"; appid:ip_mobility; sid:1002441; rev:1)
alert tcp any any -> any any (msg:"SKIP"; appid:skip; sid:1002442; rev:1)
alert tcp any any -> any any (msg:"ICMP for IPv6"; appid:icmp_for_ipv6; sid:1002443; rev:1)
alert tcp any any -> any any (msg:"ICMP for IPv6"; appid:any host; sid:1002444; rev:1)
alert tcp any any -> any any (msg:"cFTP"; appid:cftp; sid:1002445; rev:1)
alert tcp any any -> any any (msg:"SATNET and Backroom EXPAK"; appid:satnet_and_backroom_expak; sid:1002446; rev:1)
alert tcp any any -> any any (msg:"RVD"; appid:rvd; sid:1002447; rev:1)
alert tcp any any -> any any (msg:"Pluribus Packet Core"; appid:pluribus_packet_core; sid:1002448; rev:1)
alert tcp any any -> any any (msg:"SATNET Monitoring"; appid:satnet_monitoring; sid:1002449; rev:1)
alert tcp any any -> any any (msg:"IPCU"; appid:ipcu; sid:1002450; rev:1)
alert tcp any any -> any any (msg:"CP Network Executive"; appid:cp_network_executive; sid:1002451; rev:1)
alert tcp any any -> any any (msg:"CP Heart Beat"; appid:cp_heart_beat; sid:1002452; rev:1)
alert tcp any any -> any any (msg:"Wang Span"; appid:wang_span; sid:1002453; rev:1)
alert tcp any any -> any any (msg:"PVP"; appid:pvp; sid:1002454; rev:1)
alert tcp any any -> any any (msg:"SATNET"; appid:satnet; sid:1002455; rev:1)
alert tcp any any -> any any (msg:"SUN NDP"; appid:sun_ndp; sid:1002456; rev:1)
alert tcp any any -> any any (msg:"Wideband Monitoring"; appid:wideband_monitoring; sid:1002457; rev:1)
alert tcp any any -> any any (msg:"Wideband EXPAK"; appid:wideband_expak; sid:1002458; rev:1)
alert tcp any any -> any any (msg:"VMTP"; appid:vmtp; sid:1002459; rev:1)
alert tcp any any -> any any (msg:"TTP"; appid:ttp; sid:1002460; rev:1)
alert tcp any any -> any any (msg:"NSFNET-IGP"; appid:nsfnet-igp; sid:1002461; rev:1)
alert tcp any any -> any any (msg:"TCF"; appid:tcf; sid:1002462; rev:1)
alert tcp any any -> any any (msg:"EIGRP"; appid:eigrp; sid:1002463; rev:1)
alert tcp any any -> any any (msg:"OSPF"; appid:ospf; sid:1002464; rev:1)
alert tcp any any -> any any (msg:"Sprite RPC"; appid:sprite_rpc; sid:1002465; rev:1)
alert tcp any any -> any any (msg:"Locus ARP"; appid:locus_arp; sid:1002466; rev:1)
alert tcp any any -> any any (msg:"MTP"; appid:mtp; sid:1002467; rev:1)
alert tcp any any -> any any (msg:"AX.25"; appid:ax.25; sid:1002468; rev:1)
alert tcp any any -> any any (msg:"MICP"; appid:micp; sid:1002469; rev:1)
alert tcp any any -> any any (msg:"Semaphore Sec Pro"; appid:semaphore_sec_pro; sid:1002470; rev:1)
alert tcp any any -> any any (msg:"EtherIP"; appid:etherip; sid:1002471; rev:1)
alert tcp any any -> any any (msg:"Encapsulation Header"; appid:encapsulation_header; sid:1002472; rev:1)
alert tcp any any -> any any (msg:"GMTP"; appid:gmtp; sid:1002473; rev:1)
alert tcp any any -> any any (msg:"IFMP"; appid:ifmp; sid:1002474; rev:1)
alert tcp any any -> any any (msg:"PNNI"; appid:pnni; sid:1002475; rev:1)
alert tcp any any -> any any (msg:"ARIS"; appid:aris; sid:1002476; rev:1)
alert tcp any any -> any any (msg:"SCPS"; appid:scps; sid:1002477; rev:1)
alert tcp any any -> any any (msg:"QNX"; appid:qnx; sid:1002478; rev:1)
alert tcp any any -> any any (msg:"Active Networks"; appid:active_networks; sid:1002479; rev:1)
alert tcp any any -> any any (msg:"SNP"; appid:snp; sid:1002480; rev:1)
alert tcp any any -> any any (msg:"Compaq-Peer"; appid:compaq-peer; sid:1002481; rev:1)
alert tcp any any -> any any (msg:"IPX over IP"; appid:ipx_over_ip; sid:1002482; rev:1)
alert tcp any any -> any any (msg:"VRRP"; appid:vrrp; sid:1002483; rev:1)
alert tcp any any -> any any (msg:"PGM RTP"; appid:pgm_rtp; sid:1002484; rev:1)
alert tcp any any -> any any (msg:"D-II"; appid:d-ii; sid:1002485; rev:1)
alert tcp any any -> any any (msg:"IATP"; appid:iatp; sid:1002486; rev:1)
alert tcp any any -> any any (msg:"Schedule Transfer Protocol"; appid:schedule_transfer_protocol; sid:1002487; rev:1)
alert tcp any any -> any any (msg:"SRP"; appid:srp; sid:1002488; rev:1)
alert tcp any any -> any any (msg:"UTI"; appid:uti; sid:1002489; rev:1)
alert tcp any any -> any any (msg:"SMP"; appid:smp; sid:1002490; rev:1)
alert tcp any any -> any any (msg:"SM"; appid:sm; sid:1002491; rev:1)
alert tcp any any -> any any (msg:"PTP"; appid:ptp; sid:1002492; rev:1)
alert tcp any any -> any any (msg:"ISIS"; appid:isis; sid:1002493; rev:1)
alert tcp any any -> any any (msg:"Fire"; appid:fire; sid:1002494; rev:1)
alert tcp any any -> any any (msg:"Combat Radio Transport Protocol"; appid:combat_radio_transport_protocol; sid:1002495; rev:1)
alert tcp any any -> any any (msg:"Combat Radio User Datagram"; appid:combat_radio_user_datagram; sid:1002496; rev:1)
alert tcp any any -> any any (msg:"SSCOPMCE"; appid:sscopmce; sid:1002497; rev:1)
alert tcp any any -> any any (msg:"IPLT"; appid:iplt; sid:1002498; rev:1)
alert tcp any any -> any any (msg:"SPS"; appid:sps; sid:1002499; rev:1)
alert tcp any any -> any any (msg:"PIPE"; appid:pipe; sid:1002500; rev:1)
alert tcp any any -> any any (msg:"iFCP"; appid:ifcp; sid:1002501; rev:1)
alert tcp any any -> any any (msg:"RSVP-E2E-IGNORE"; appid:rsvp-e2e-ignore; sid:1002502; rev:1)
alert tcp any any -> any any (msg:"MPLS"; appid:mpls; sid:1002503; rev:1)
alert tcp any any -> any any (msg:"HIP"; appid:hip; sid:1002504; rev:1)
alert tcp any any -> any any (msg:"Amazon Cloud Drive"; appid:amazon_cloud_drive; sid:1002505; rev:1)
alert tcp any any -> any any (msg:"Amazon Cloud Drive Download"; appid:amazon_cloud_drive_download; sid:1002506; rev:1)
alert tcp any any -> any any (msg:"Amazon Cloud Drive Upload"; appid:amazon_cloud_drive_upload; sid:1002507; rev:1)
alert tcp any any -> any any (msg:"Kik Messenger"; appid:kik_messenger; sid:1002508; rev:1)
alert tcp any any -> any any (msg:"VPNReactor"; appid:vpnreactor; sid:1002509; rev:1)
alert tcp any any -> any any (msg:"CyberGhost VPN"; appid:cyberghost_vpn; sid:1002510; rev:1)
alert tcp any any -> any any (msg:"GRE"; appid:gre; sid:1002511; rev:1)
alert tcp any any -> any any (msg:"Alipay"; appid:alipay; sid:1002512; rev:1)
alert tcp any any -> any any (msg:"Delta Search"; appid:delta_search; sid:1002513; rev:1)
alert tcp any any -> any any (msg:"Fluent"; appid:fluent; sid:1002514; rev:1)
alert tcp any any -> any any (msg:"MelOn"; appid:melon; sid:1002515; rev:1)
alert tcp any any -> any any (msg:"Microsoft Store"; appid:microsoft_store; sid:1002516; rev:1)
alert tcp any any -> any any (msg:"Microsoft Store"; appid:news.com.au; sid:1002517; rev:1)
alert tcp any any -> any any (msg:"Soso"; appid:soso; sid:1002518; rev:1)
alert tcp any any -> any any (msg:"Woolik"; appid:woolik; sid:1002519; rev:1)
alert tcp any any -> any any (msg:"Sina"; appid:sina; sid:1002520; rev:1)
alert tcp any any -> any any (msg:"Airsoft Powerburst"; appid:airsoft_powerburst; sid:1002521; rev:1)
alert tcp any any -> any any (msg:"GSS HTTP"; appid:gss_http; sid:1002522; rev:1)
alert tcp any any -> any any (msg:"NetWall"; appid:netwall; sid:1002523; rev:1)
alert tcp any any -> any any (msg:"Eudora Set"; appid:eudora_set; sid:1002524; rev:1)
alert tcp any any -> any any (msg:"Service Status Update"; appid:service_status_update; sid:1002525; rev:1)
alert tcp any any -> any any (msg:"ESRO-EMSDP V1.3"; appid:esro-emsdp_v1.3; sid:1002526; rev:1)
alert tcp any any -> any any (msg:"OLSR"; appid:olsr; sid:1002527; rev:1)
alert tcp any any -> any any (msg:"PKIX-3 CA/RA"; appid:pkix-3_ca/ra; sid:1002528; rev:1)
alert tcp any any -> any any (msg:"Oracle Remote Data Base"; appid:oracle_remote_data_base; sid:1002529; rev:1)
alert tcp any any -> any any (msg:"ISCSI"; appid:iscsi; sid:1002530; rev:1)
alert tcp any any -> any any (msg:"Tapeware"; appid:tapeware; sid:1002531; rev:1)
alert tcp any any -> any any (msg:"IAX"; appid:iax; sid:1002532; rev:1)
alert tcp any any -> any any (msg:"CVSup"; appid:cvsup; sid:1002533; rev:1)
alert tcp any any -> any any (msg:"MSOC File Transfer"; appid:msoc_file_transfer; sid:1002534; rev:1)
alert tcp any any -> any any (msg:"McAfee AutoUpdate"; appid:mcafee_autoupdate; sid:1002535; rev:1)
alert tcp any any -> any any (msg:"AMANDA"; appid:amanda; sid:1002536; rev:1)
alert tcp any any -> any any (msg:"Oracle Business Intelligence"; appid:oracle_business_intelligence; sid:1002537; rev:1)
alert tcp any any -> any any (msg:"Oracle Business Intelligence"; appid:webster; sid:1002538; rev:1)
alert tcp any any -> any any (msg:"Oracle Business Intelligence"; appid:tn-tl-fd1; sid:1002539; rev:1)
alert tcp any any -> any any (msg:"GGP"; appid:ggp; sid:1002540; rev:1)
alert tcp any any -> any any (msg:"MERIT Internodal Protocol"; appid:merit_internodal_protocol; sid:1002541; rev:1)
alert tcp any any -> any any (msg:"UDP Lite"; appid:udp_lite; sid:1002542; rev:1)
alert tcp any any -> any any (msg:"Ad4mat"; appid:ad4mat; sid:1002543; rev:1)
alert tcp any any -> any any (msg:"Betclic"; appid:betclic; sid:1002544; rev:1)
alert tcp any any -> any any (msg:"Cedexis"; appid:cedexis; sid:1002545; rev:1)
alert tcp any any -> any any (msg:"GG"; appid:gg; sid:1002546; rev:1)
alert tcp any any -> any any (msg:"L'equipe.fr"; appid:l'equipe.fr; sid:1002547; rev:1)
alert tcp any any -> any any (msg:"Ligatus"; appid:ligatus; sid:1002548; rev:1)
alert tcp any any -> any any (msg:"LINE Games"; appid:line_games; sid:1002549; rev:1)
alert tcp any any -> any any (msg:"LINE Media"; appid:line_media; sid:1002550; rev:1)
alert tcp any any -> any any (msg:"LINE Media"; appid:1000mercis; sid:1002551; rev:1)
alert tcp any any -> any any (msg:"Piksel"; appid:piksel; sid:1002552; rev:1)
alert tcp any any -> any any (msg:"Proxistore"; appid:proxistore; sid:1002553; rev:1)
alert tcp any any -> any any (msg:"Surikate"; appid:surikate; sid:1002554; rev:1)
alert tcp any any -> any any (msg:"VIEWON"; appid:viewon; sid:1002555; rev:1)
alert tcp any any -> any any (msg:"Viewsurf"; appid:viewsurf; sid:1002556; rev:1)
alert tcp any any -> any any (msg:"Weborama"; appid:weborama; sid:1002557; rev:1)
alert tcp any any -> any any (msg:"XiTi"; appid:xiti; sid:1002558; rev:1)
alert tcp any any -> any any (msg:"Zanox"; appid:zanox; sid:1002559; rev:1)
alert tcp any any -> any any (msg:"WebEx Connect"; appid:webex_connect; sid:1002560; rev:1)
alert tcp any any -> any any (msg:"QQ Games"; appid:qq_games; sid:1002561; rev:1)
alert tcp any any -> any any (msg:"easyMule"; appid:easymule; sid:1002562; rev:1)
alert tcp any any -> any any (msg:"Yik Yak"; appid:yik_yak; sid:1002563; rev:1)
alert tcp any any -> any any (msg:"OpenDoor"; appid:opendoor; sid:1002564; rev:1)
alert tcp any any -> any any (msg:"OneDrive"; appid:onedrive; sid:1002565; rev:1)
alert tcp any any -> any any (msg:"LinkedIn Contacts"; appid:linkedin_contacts; sid:1002566; rev:1)
alert tcp any any -> any any (msg:"Rackspace"; appid:rackspace; sid:1002567; rev:1)
alert tcp any any -> any any (msg:"ServiceNow"; appid:servicenow; sid:1002568; rev:1)
alert tcp any any -> any any (msg:"T-Online"; appid:t-online; sid:1002569; rev:1)
alert tcp any any -> any any (msg:"Web.de"; appid:web.de; sid:1002570; rev:1)
alert tcp any any -> any any (msg:"Workday"; appid:workday; sid:1002571; rev:1)
alert tcp any any -> any any (msg:"AppNeta"; appid:appneta; sid:1002572; rev:1)
alert tcp any any -> any any (msg:"Blizzard Downloader"; appid:blizzard_downloader; sid:1002573; rev:1)
alert tcp any any -> any any (msg:"Blizzard"; appid:blizzard; sid:1002574; rev:1)
alert tcp any any -> any any (msg:"Battle.net site"; appid:battle.net_site; sid:1002575; rev:1)
alert tcp any any -> any any (msg:"Pathview"; appid:pathview; sid:1002576; rev:1)
alert tcp any any -> any any (msg:"Slingbox Media"; appid:slingbox_media; sid:1002577; rev:1)
alert tcp any any -> any any (msg:"USAIP"; appid:usaip; sid:1002578; rev:1)
alert tcp any any -> any any (msg:"Yahoo! Douga"; appid:yahoo!_douga; sid:1002579; rev:1)
alert tcp any any -> any any (msg:"Yahoo! Box"; appid:yahoo!_box; sid:1002580; rev:1)
alert tcp any any -> any any (msg:"Crazy Browser"; appid:crazy_browser; sid:1002581; rev:1)
alert tcp any any -> any any (msg:"GreenBrowser"; appid:greenbrowser; sid:1002582; rev:1)
alert tcp any any -> any any (msg:"CometBird"; appid:cometbird; sid:1002583; rev:1)
alert tcp any any -> any any (msg:"Flock"; appid:flock; sid:1002584; rev:1)
alert tcp any any -> any any (msg:"Arora"; appid:arora; sid:1002585; rev:1)
alert tcp any any -> any any (msg:"Facebook Notes"; appid:fb_notes; sid:1002586; rev:1)
alert tcp any any -> any any (msg:"Browzar"; appid:browzar; sid:1002587; rev:1)
alert tcp any any -> any any (msg:"IEC 60870-5-104"; appid:iec-104; sid:1002588; rev:1)
alert tcp any any -> any any (msg:"Clip2Net"; appid:clip2net; sid:1002589; rev:1)
alert tcp any any -> any any (msg:"Clip2Net Upload"; appid:clip2net_upload; sid:1002590; rev:1)
alert tcp any any -> any any (msg:"LogMeIn Rescue"; appid:logmein_rescue; sid:1002591; rev:1)
alert tcp any any -> any any (msg:"Mendeley"; appid:mendeley; sid:1002592; rev:1)
alert tcp any any -> any any (msg:"Onehub"; appid:onehub; sid:1002593; rev:1)
alert tcp any any -> any any (msg:"ZumoDrive"; appid:zumodrive; sid:1002594; rev:1)
alert tcp any any -> any any (msg:"eFax"; appid:efax; sid:1002595; rev:1)
alert tcp any any -> any any (msg:"Yesky"; appid:yesky; sid:1002596; rev:1)
alert tcp any any -> any any (msg:"Yahoo! Screen"; appid:yahoo!_screen; sid:1002597; rev:1)
alert tcp any any -> any any (msg:"Prime Video"; appid:prime_video; sid:1002598; rev:1)
alert tcp any any -> any any (msg:"Playstation Games"; appid:playstation_games; sid:1002599; rev:1)
alert tcp any any -> any any (msg:"TISTORY"; appid:tistory; sid:1002600; rev:1)
alert tcp any any -> any any (msg:"DioDeo"; appid:diodeo; sid:1002601; rev:1)
alert tcp any any -> any any (msg:"Egloos"; appid:egloos; sid:1002602; rev:1)
alert tcp any any -> any any (msg:"Lineage"; appid:lineage; sid:1002603; rev:1)
alert tcp any any -> any any (msg:"MapleStory"; appid:maplestory; sid:1002604; rev:1)
alert tcp any any -> any any (msg:"MapleStory"; appid:ezhelp; sid:1002605; rev:1)
alert tcp any any -> any any (msg:"Level 3"; appid:level_3; sid:1002606; rev:1)
alert tcp any any -> any any (msg:"Net2Phone"; appid:net2phone; sid:1002607; rev:1)
alert tcp any any -> any any (msg:"SoftEther"; appid:softether; sid:1002608; rev:1)
alert tcp any any -> any any (msg:"Speedtest Upload"; appid:speedtest_upload; sid:1002609; rev:1)
alert tcp any any -> any any (msg:"Channel 4"; appid:channel_4; sid:1002610; rev:1)
alert tcp any any -> any any (msg:"MissLee"; appid:misslee; sid:1002611; rev:1)
alert tcp any any -> any any (msg:"QDown"; appid:qdown; sid:1002612; rev:1)
alert tcp any any -> any any (msg:"SBS"; appid:sbs; sid:1002613; rev:1)
alert tcp any any -> any any (msg:"C3 Metrics"; appid:c3_metrics; sid:1002614; rev:1)
alert tcp any any -> any any (msg:"LeadLander"; appid:leadlander; sid:1002615; rev:1)
alert tcp any any -> any any (msg:"Bootstrap CDN"; appid:bootstrap_cdn; sid:1002616; rev:1)
alert tcp any any -> any any (msg:"GTP User"; appid:gtp_user; sid:1002617; rev:1)
alert tcp any any -> any any (msg:"RIPng"; appid:ripng; sid:1002618; rev:1)
alert tcp any any -> any any (msg:"Aurora"; appid:aurora; sid:1002619; rev:1)
alert tcp any any -> any any (msg:"BaiduHi"; appid:baiduhi; sid:1002620; rev:1)
alert tcp any any -> any any (msg:"Diameter"; appid:diameter; sid:1002621; rev:1)
alert tcp any any -> any any (msg:"IGMP"; appid:igmp; sid:1002622; rev:1)
alert tcp any any -> any any (msg:"ISO IP"; appid:iso_ip; sid:1002623; rev:1)
alert tcp any any -> any any (msg:"Ad Master"; appid:ad_master; sid:1002624; rev:1)
alert tcp any any -> any any (msg:"Ad Tech"; appid:ad_tech; sid:1002625; rev:1)
alert tcp any any -> any any (msg:"GREE Games"; appid:gree_games; sid:1002626; rev:1)
alert tcp any any -> any any (msg:"GungHo Online Entertainment"; appid:gungho_online_entertainment; sid:1002627; rev:1)
alert tcp any any -> any any (msg:"ITV"; appid:itv; sid:1002628; rev:1)
alert tcp any any -> any any (msg:"ShareFile Upload SSL"; appid:sharefile_upload_ssl; sid:1002629; rev:1)
alert tcp any any -> any any (msg:"PIM"; appid:pim; sid:1002630; rev:1)
alert tcp any any -> any any (msg:"IPComp"; appid:ipcomp; sid:1002631; rev:1)
alert tcp any any -> any any (msg:"PARC Universal Packet"; appid:parc_universal_packet; sid:1002632; rev:1)
alert tcp any any -> any any (msg:"IDP"; appid:idp; sid:1002633; rev:1)
alert tcp any any -> any any (msg:"360 Safeguard"; appid:360_safeguard; sid:1002634; rev:1)
alert tcp any any -> any any (msg:"Neobux"; appid:neobux; sid:1002635; rev:1)
alert tcp any any -> any any (msg:"People's Daily"; appid:people's_daily; sid:1002636; rev:1)
alert tcp any any -> any any (msg:"Kickass Torrents"; appid:kickass_torrents; sid:1002637; rev:1)
alert tcp any any -> any any (msg:"China Daily"; appid:china_daily; sid:1002638; rev:1)
alert tcp any any -> any any (msg:"Guangming Online"; appid:guangming_online; sid:1002639; rev:1)
alert tcp any any -> any any (msg:"RevenueHits"; appid:revenuehits; sid:1002640; rev:1)
alert tcp any any -> any any (msg:"Info.com"; appid:info.com; sid:1002641; rev:1)
alert tcp any any -> any any (msg:"Code42"; appid:code42; sid:1002642; rev:1)
alert tcp any any -> any any (msg:"CrashPlan"; appid:crashplan; sid:1002643; rev:1)
alert tcp any any -> any any (msg:"Tencent Cloud"; appid:tencent_cloud; sid:1002644; rev:1)
alert tcp any any -> any any (msg:"QQ Mail"; appid:qq_mail; sid:1002645; rev:1)
alert tcp any any -> any any (msg:"QQ Pay"; appid:qq_pay; sid:1002646; rev:1)
alert tcp any any -> any any (msg:"Gmail attachment"; appid:gmail_attachment; sid:1002647; rev:1)
alert tcp any any -> any any (msg:"ESP"; appid:esp; sid:1002648; rev:1)
alert tcp any any -> any any (msg:"Autodesk"; appid:autodesk; sid:1002649; rev:1)
alert tcp any any -> any any (msg:"Blackbaud"; appid:blackbaud; sid:1002650; rev:1)
alert tcp any any -> any any (msg:"Demandbase"; appid:demandbase; sid:1002651; rev:1)
alert tcp any any -> any any (msg:"Intralinks"; appid:intralinks; sid:1002652; rev:1)
alert tcp any any -> any any (msg:"NetSuite"; appid:netsuite; sid:1002653; rev:1)
alert tcp any any -> any any (msg:"Onavo"; appid:onavo; sid:1002654; rev:1)
alert tcp any any -> any any (msg:"Plista"; appid:plista; sid:1002655; rev:1)
alert tcp any any -> any any (msg:"SuccessFactors"; appid:successfactors; sid:1002656; rev:1)
alert tcp any any -> any any (msg:"Wow"; appid:wow_com; sid:1002657; rev:1)
alert tcp any any -> any any (msg:"Webcrawler"; appid:webcrawler; sid:1002658; rev:1)
alert tcp any any -> any any (msg:"ADP"; appid:adp; sid:1002659; rev:1)
alert tcp any any -> any any (msg:"ADP GlobalView"; appid:adp_globalview; sid:1002660; rev:1)
alert tcp any any -> any any (msg:"ADP Resource"; appid:adp_resource; sid:1002661; rev:1)
alert tcp any any -> any any (msg:"ADP Streamline"; appid:adp_streamline; sid:1002662; rev:1)
alert tcp any any -> any any (msg:"ADP TotalSource"; appid:adp_totalsource; sid:1002663; rev:1)
alert tcp any any -> any any (msg:"ADP Workforce Now"; appid:adp_workforce_now; sid:1002664; rev:1)
alert tcp any any -> any any (msg:"Cerner Corporation"; appid:cerner_corporation; sid:1002665; rev:1)
alert tcp any any -> any any (msg:"Conviva"; appid:conviva; sid:1002666; rev:1)
alert tcp any any -> any any (msg:"Dealertrack"; appid:dealertrack; sid:1002667; rev:1)
alert tcp any any -> any any (msg:"QuickBase"; appid:quickbase; sid:1002668; rev:1)
alert tcp any any -> any any (msg:"QuickBooks"; appid:quickbooks; sid:1002669; rev:1)
alert tcp any any -> any any (msg:"TurboTax"; appid:turbotax; sid:1002670; rev:1)
alert tcp any any -> any any (msg:"Marketo"; appid:marketo; sid:1002671; rev:1)
alert tcp any any -> any any (msg:"QQ Music"; appid:qq_music; sid:1002672; rev:1)
alert tcp any any -> any any (msg:"Tencent Video"; appid:tencent_video; sid:1002673; rev:1)
alert tcp any any -> any any (msg:"Siteimprove"; appid:siteimprove; sid:1002674; rev:1)
alert tcp any any -> any any (msg:"Ultimate Software"; appid:ultimate_software; sid:1002675; rev:1)
alert tcp any any -> any any (msg:"Hulu Video"; appid:hulu_video; sid:1002676; rev:1)
alert tcp any any -> any any (msg:"MQTT"; appid:mqtt; sid:1002677; rev:1)
alert tcp any any -> any any (msg:"RSVP"; appid:rsvp; sid:1002678; rev:1)
alert tcp any any -> any any (msg:"Asana"; appid:asana; sid:1002679; rev:1)
alert tcp any any -> any any (msg:"Baydin"; appid:baydin; sid:1002680; rev:1)
alert tcp any any -> any any (msg:"Boomerang"; appid:boomerang; sid:1002681; rev:1)
alert tcp any any -> any any (msg:"Cloudsponge"; appid:cloudsponge; sid:1002682; rev:1)
alert tcp any any -> any any (msg:"Cvent"; appid:cvent; sid:1002683; rev:1)
alert tcp any any -> any any (msg:"DocuSign"; appid:docusign; sid:1002684; rev:1)
alert tcp any any -> any any (msg:"Gantter"; appid:gantter; sid:1002685; rev:1)
alert tcp any any -> any any (msg:"InQuest Technologies"; appid:inquest_technologies; sid:1002686; rev:1)
alert tcp any any -> any any (msg:"Inspectlet"; appid:inspectlet; sid:1002687; rev:1)
alert tcp any any -> any any (msg:"Lucidchart"; appid:lucidchart; sid:1002688; rev:1)
alert tcp any any -> any any (msg:"SlideRocket"; appid:sliderocket; sid:1002689; rev:1)
alert tcp any any -> any any (msg:"TripIt"; appid:tripit; sid:1002690; rev:1)
alert tcp any any -> any any (msg:"UEFA"; appid:uefa; sid:1002691; rev:1)
alert tcp any any -> any any (msg:"WarLight"; appid:warlight; sid:1002692; rev:1)
alert tcp any any -> any any (msg:"Zomato"; appid:zomato; sid:1002693; rev:1)
alert tcp any any -> any any (msg:"Firebase Crashlytics"; appid:firebase_crashlytics; sid:1002694; rev:1)
alert tcp any any -> any any (msg:"Flipkart"; appid:flipkart; sid:1002695; rev:1)
alert tcp any any -> any any (msg:"Cisco Jabber"; appid:cisco_jabber; sid:1002696; rev:1)
alert tcp any any -> any any (msg:"ESPNcricinfo"; appid:espncricinfo; sid:1002697; rev:1)
alert tcp any any -> any any (msg:"Microsoft Visual Studio"; appid:microsoft_visual_studio; sid:1002698; rev:1)
alert tcp any any -> any any (msg:"BlueStacks"; appid:bluestacks; sid:1002699; rev:1)
alert tcp any any -> any any (msg:"JetBrains"; appid:jetbrains; sid:1002700; rev:1)
alert tcp any any -> any any (msg:"Youdao Dictionary"; appid:youdao_dictionary; sid:1002701; rev:1)
alert tcp any any -> any any (msg:"JetBrains update"; appid:jetbrains_update; sid:1002702; rev:1)
alert tcp any any -> any any (msg:"JetBrains plugins"; appid:jetbrains_plugins; sid:1002703; rev:1)
alert tcp any any -> any any (msg:"JetBrains feature"; appid:jetbrains_feature; sid:1002704; rev:1)
alert tcp any any -> any any (msg:"BlueStacks update"; appid:bluestacks_update; sid:1002705; rev:1)
alert tcp any any -> any any (msg:"BlueStacks download"; appid:bluestacks_download; sid:1002706; rev:1)
alert tcp any any -> any any (msg:"BlueStacks apps"; appid:bluestacks_apps; sid:1002707; rev:1)
alert tcp any any -> any any (msg:"F-secure"; appid:f-secure; sid:1002708; rev:1)
alert tcp any any -> any any (msg:"Malwarebytes"; appid:malwarebytes; sid:1002709; rev:1)
alert tcp any any -> any any (msg:"SUPERAntiSpyware"; appid:superantispyware; sid:1002710; rev:1)
alert tcp any any -> any any (msg:"Periscope"; appid:periscope; sid:1002711; rev:1)
alert tcp any any -> any any (msg:"ZenMate"; appid:zenmate; sid:1002712; rev:1)
alert tcp any any -> any any (msg:"FTP Active"; appid:ftp_active; sid:1002713; rev:1)
alert tcp any any -> any any (msg:"FTP Passive"; appid:ftp_passive; sid:1002714; rev:1)
alert tcp any any -> any any (msg:"Eve Online"; appid:eve_online; sid:1002715; rev:1)
alert tcp any any -> any any (msg:"CCP Games"; appid:ccp_games; sid:1002716; rev:1)
alert tcp any any -> any any (msg:"Mojang"; appid:mojang; sid:1002717; rev:1)
alert tcp any any -> any any (msg:"WPS Office"; appid:wps_office; sid:1002718; rev:1)
alert tcp any any -> any any (msg:"Apple Pipeline"; appid:apple_pipeline; sid:1002719; rev:1)
alert tcp any any -> any any (msg:"Kontiki"; appid:kontiki; sid:1002720; rev:1)
alert tcp any any -> any any (msg:"Brewster"; appid:brewster; sid:1002721; rev:1)
alert tcp any any -> any any (msg:"EA Download Manager"; appid:ea_download_manager; sid:1002722; rev:1)
alert tcp any any -> any any (msg:"JoinMe"; appid:joinme; sid:1002723; rev:1)
alert tcp any any -> any any (msg:"CloudApp"; appid:cloudapp; sid:1002724; rev:1)
alert tcp any any -> any any (msg:"QUIC"; appid:quic; sid:1002725; rev:1)
alert tcp any any -> any any (msg:"Rapidgator"; appid:rapidgator; sid:1002726; rev:1)
alert tcp any any -> any any (msg:"Syncplicity"; appid:syncplicity; sid:1002727; rev:1)
alert tcp any any -> any any (msg:"Gom VPN"; appid:gom_vpn; sid:1002728; rev:1)
alert tcp any any -> any any (msg:"I2P"; appid:i2p; sid:1002729; rev:1)
alert tcp any any -> any any (msg:"Jungle Disk"; appid:jungle_disk; sid:1002730; rev:1)
alert tcp any any -> any any (msg:"Ninite"; appid:ninite; sid:1002731; rev:1)
alert tcp any any -> any any (msg:"SpiderOak"; appid:spideroak; sid:1002732; rev:1)
alert tcp any any -> any any (msg:"Uploaded"; appid:uploaded; sid:1002733; rev:1)
alert tcp any any -> any any (msg:"Wondershare"; appid:wondershare; sid:1002734; rev:1)
alert tcp any any -> any any (msg:"Western Digital"; appid:western_digital; sid:1002735; rev:1)
alert tcp any any -> any any (msg:"WD softwares Download/Update"; appid:wd_softwares_download/update; sid:1002736; rev:1)
alert tcp any any -> any any (msg:"Hola"; appid:hola; sid:1002737; rev:1)
alert tcp any any -> any any (msg:"Baidu Yun"; appid:baidu_yun; sid:1002738; rev:1)
alert tcp any any -> any any (msg:"Spinrilla"; appid:spinrilla; sid:1002739; rev:1)
alert tcp any any -> any any (msg:"Slack"; appid:slack; sid:1002740; rev:1)
alert tcp any any -> any any (msg:"Burnbook"; appid:burnbook; sid:1002741; rev:1)
alert tcp any any -> any any (msg:"skyZIP"; appid:skyzip; sid:1002742; rev:1)
alert tcp any any -> any any (msg:"Naver Blog"; appid:naver_blog; sid:1002743; rev:1)
alert tcp any any -> any any (msg:"Naver Cafe"; appid:naver_cafe; sid:1002744; rev:1)
alert tcp any any -> any any (msg:"Daum Blog"; appid:daum_blog; sid:1002745; rev:1)
alert tcp any any -> any any (msg:"Daum Cafe"; appid:daum_cafe; sid:1002746; rev:1)
alert tcp any any -> any any (msg:"Naver Mail"; appid:naver_mail; sid:1002747; rev:1)
alert tcp any any -> any any (msg:"Daum Mail"; appid:daum_mail; sid:1002748; rev:1)
alert tcp any any -> any any (msg:"Kakao Story"; appid:kakao_story; sid:1002749; rev:1)
alert tcp any any -> any any (msg:"Edge"; appid:edge; sid:1002750; rev:1)
alert tcp any any -> any any (msg:"Yandex AppMetrica"; appid:yandex_appmetrica; sid:1002751; rev:1)
alert tcp any any -> any any (msg:"Yandex Images"; appid:yandex_images; sid:1002752; rev:1)
alert tcp any any -> any any (msg:"Yandex Email"; appid:yandex_email; sid:1002753; rev:1)
alert tcp any any -> any any (msg:"Yandex Maps"; appid:yandex_maps; sid:1002754; rev:1)
alert tcp any any -> any any (msg:"Yandex Money"; appid:yandex_money; sid:1002755; rev:1)
alert tcp any any -> any any (msg:"Yandex Market"; appid:yandex_market; sid:1002756; rev:1)
alert tcp any any -> any any (msg:"Yandex Music"; appid:yandex_music; sid:1002757; rev:1)
alert tcp any any -> any any (msg:"Yandex Translate"; appid:yandex_translate; sid:1002758; rev:1)
alert tcp any any -> any any (msg:"Yandex Video"; appid:yandex_video; sid:1002759; rev:1)
alert tcp any any -> any any (msg:"Facebook Like"; appid:facebook_like; sid:1002760; rev:1)
alert tcp any any -> any any (msg:"Sway"; appid:sway; sid:1002761; rev:1)
alert tcp any any -> any any (msg:"Office 365 Planner"; appid:office_365_planner; sid:1002762; rev:1)
alert tcp any any -> any any (msg:"Office Mobile"; appid:office_mobile; sid:1002763; rev:1)
alert tcp any any -> any any (msg:"Messenger"; appid:messenger; sid:1002764; rev:1)
alert tcp any any -> any any (msg:"Psiphon"; appid:psiphon; sid:1002765; rev:1)
alert tcp any any -> any any (msg:"Tanium"; appid:tanium; sid:1002766; rev:1)
alert tcp any any -> any any (msg:"Fiesta"; appid:fiesta; sid:1002767; rev:1)
alert tcp any any -> any any (msg:"Blackbox"; appid:blackbox; sid:1002768; rev:1)
alert tcp any any -> any any (msg:"Webex Teams"; appid:webex_teams; sid:1002769; rev:1)
alert tcp any any -> any any (msg:"Microsoft Web Platform Installer"; appid:ms_web_pl_inst; sid:1002770; rev:1)
alert tcp any any -> any any (msg:"Yemonisoni"; appid:yemonisoni; sid:1002771; rev:1)
alert tcp any any -> any any (msg:"MoPub"; appid:mopub; sid:1002772; rev:1)
alert tcp any any -> any any (msg:"MobileCore"; appid:mobilecore; sid:1002773; rev:1)
alert tcp any any -> any any (msg:"Synology DSM"; appid:synology_dsm; sid:1002774; rev:1)
alert tcp any any -> any any (msg:"LiveJournal Post"; appid:livejournal_post; sid:1002775; rev:1)
alert tcp any any -> any any (msg:"Mail.ru Attachment"; appid:mail.ru_attachment; sid:1002776; rev:1)
alert tcp any any -> any any (msg:"Betternet"; appid:betternet; sid:1002777; rev:1)
alert tcp any any -> any any (msg:"Boom Beach"; appid:boom_beach; sid:1002778; rev:1)
alert tcp any any -> any any (msg:"Browsec"; appid:browsec; sid:1002779; rev:1)
alert tcp any any -> any any (msg:"Clash of Clans"; appid:clash_of_clans; sid:1002780; rev:1)
alert tcp any any -> any any (msg:"Frozenway"; appid:frozenway; sid:1002781; rev:1)
alert tcp any any -> any any (msg:"Supercell"; appid:supercell; sid:1002782; rev:1)
alert tcp any any -> any any (msg:"Clash Royale"; appid:clash_royale; sid:1002783; rev:1)
alert tcp any any -> any any (msg:"Cydia"; appid:cydia; sid:1002784; rev:1)
alert tcp any any -> any any (msg:"VPN Master"; appid:vpn_master; sid:1002785; rev:1)
alert tcp any any -> any any (msg:"SoundHound"; appid:soundhound; sid:1002786; rev:1)
alert tcp any any -> any any (msg:"Anghami"; appid:anghami; sid:1002787; rev:1)
alert tcp any any -> any any (msg:"Niantic Labs"; appid:niantic_labs; sid:1002788; rev:1)
alert tcp any any -> any any (msg:"Pokemon Go"; appid:pokemon_go; sid:1002789; rev:1)
alert tcp any any -> any any (msg:"Zalmos"; appid:zalmos; sid:1002790; rev:1)
alert tcp any any -> any any (msg:"Bomgar"; appid:bomgar; sid:1002791; rev:1)
alert tcp any any -> any any (msg:"Hello"; appid:hello; sid:1002792; rev:1)
alert tcp any any -> any any (msg:"WebM Files"; appid:webm_files; sid:1002793; rev:1)
alert tcp any any -> any any (msg:"Rsupport"; appid:rsupport; sid:1002794; rev:1)
alert tcp any any -> any any (msg:"EdgeCast"; appid:edgecast; sid:1002795; rev:1)
alert tcp any any -> any any (msg:"Circuit"; appid:circuit; sid:1002796; rev:1)
alert tcp any any -> any any (msg:"Telegram"; appid:telegram; sid:1002797; rev:1)
alert tcp any any -> any any (msg:"AOL Games"; appid:aol_games; sid:1002798; rev:1)
alert tcp any any -> any any (msg:"AOL Video"; appid:aol_video; sid:1002799; rev:1)
alert tcp any any -> any any (msg:"DGP"; appid:dgp; sid:1002800; rev:1)
alert tcp any any -> any any (msg:"VISA"; appid:visa; sid:1002801; rev:1)
alert tcp any any -> any any (msg:"MUX"; appid:mux; sid:1002802; rev:1)
alert tcp any any -> any any (msg:"ROHC"; appid:rohc; sid:1002803; rev:1)
alert tcp any any -> any any (msg:"SVMTP"; appid:svmtp; sid:1002804; rev:1)
alert tcp any any -> any any (msg:"TLSP"; appid:tlsp; sid:1002805; rev:1)
alert tcp any any -> any any (msg:"WESP"; appid:wesp; sid:1002806; rev:1)
alert tcp any any -> any any (msg:"Google G-Suite"; appid:google_g-suite; sid:1002807; rev:1)
alert tcp any any -> any any (msg:"Google Duo"; appid:google_duo; sid:1002808; rev:1)
alert tcp any any -> any any (msg:"Zero VPN"; appid:zerovpn; sid:1002809; rev:1)
alert tcp any any -> any any (msg:"Nintendo"; appid:nintendo; sid:1002810; rev:1)
alert tcp any any -> any any (msg:"Gothere"; appid:gothere; sid:1002811; rev:1)
alert tcp any any -> any any (msg:"HIKE"; appid:hike; sid:1002812; rev:1)
alert tcp any any -> any any (msg:"HIKE Media"; appid:hike_media; sid:1002813; rev:1)
alert tcp any any -> any any (msg:"Ngrok"; appid:ngrok; sid:1002814; rev:1)
alert tcp any any -> any any (msg:"Paybill"; appid:paybill; sid:1002815; rev:1)
alert tcp any any -> any any (msg:"Proxifier"; appid:proxifier; sid:1002816; rev:1)
alert tcp any any -> any any (msg:"Uber"; appid:uber; sid:1002817; rev:1)
alert tcp any any -> any any (msg:"CactusVPN"; appid:cactusvpn; sid:1002818; rev:1)
alert tcp any any -> any any (msg:"RealVNC"; appid:realvnc; sid:1002819; rev:1)
alert tcp any any -> any any (msg:"Elephant Drive"; appid:elephant_drive; sid:1002820; rev:1)
alert tcp any any -> any any (msg:"Open Drive"; appid:open_drive; sid:1002821; rev:1)
alert tcp any any -> any any (msg:"AnyDesk"; appid:anydesk; sid:1002822; rev:1)
alert tcp any any -> any any (msg:"NetSarang"; appid:netsarang; sid:1002823; rev:1)
alert tcp any any -> any any (msg:"DDS"; appid:dds; sid:1002824; rev:1)
alert tcp any any -> any any (msg:"Flightradar24"; appid:flightradar24; sid:1002825; rev:1)
alert tcp any any -> any any (msg:"Showbox"; appid:showbox; sid:1002826; rev:1)
alert tcp any any -> any any (msg:"ZenVPN"; appid:zenvpn; sid:1002827; rev:1)
alert tcp any any -> any any (msg:"BlueJeans"; appid:bluejeans; sid:1002828; rev:1)
alert tcp any any -> any any (msg:"Hotstar"; appid:hotstar; sid:1002829; rev:1)
alert tcp any any -> any any (msg:"TikTok"; appid:tiktok; sid:1002830; rev:1)
alert tcp any any -> any any (msg:"Azar Live"; appid:azar_live; sid:1002831; rev:1)
alert tcp any any -> any any (msg:"Ghaneely"; appid:ghaneely; sid:1002832; rev:1)
alert tcp any any -> any any (msg:"Openload"; appid:openload; sid:1002833; rev:1)
alert tcp any any -> any any (msg:"DTLS"; appid:dtls; sid:1002834; rev:1)
alert tcp any any -> any any (msg:"DingDing"; appid:dingding; sid:1002835; rev:1)
alert tcp any any -> any any (msg:"DingDing"; appid:1fichier; sid:1002836; rev:1)
alert tcp any any -> any any (msg:"9Gag"; appid:9gag; sid:1002837; rev:1)
alert tcp any any -> any any (msg:"ABS-CBN"; appid:abs-cbn; sid:1002838; rev:1)
alert tcp any any -> any any (msg:"AcFun"; appid:acfun; sid:1002839; rev:1)
alert tcp any any -> any any (msg:"Ad Redirector"; appid:ad_redirector; sid:1002840; rev:1)
alert tcp any any -> any any (msg:"Advanced Hosters"; appid:advanced_hosters; sid:1002841; rev:1)
alert tcp any any -> any any (msg:"Albawaba"; appid:albawaba; sid:1002842; rev:1)
alert tcp any any -> any any (msg:"ASKfm"; appid:askfm; sid:1002843; rev:1)
alert tcp any any -> any any (msg:"ASKfm"; appid:asos; sid:1002844; rev:1)
alert tcp any any -> any any (msg:"Avito"; appid:avito; sid:1002845; rev:1)
alert tcp any any -> any any (msg:"AZLyrics"; appid:azlyrics; sid:1002846; rev:1)
alert tcp any any -> any any (msg:"Babytree"; appid:babytree; sid:1002847; rev:1)
alert tcp any any -> any any (msg:"Baike.com"; appid:baike.com; sid:1002848; rev:1)
alert tcp any any -> any any (msg:"Beeg"; appid:beeg; sid:1002849; rev:1)
alert tcp any any -> any any (msg:"Behance"; appid:behance; sid:1002850; rev:1)
alert tcp any any -> any any (msg:"Qatar Airways"; appid:qatar_airways; sid:1002851; rev:1)
alert tcp any any -> any any (msg:"Qatar Government"; appid:qatar_government; sid:1002852; rev:1)
alert tcp any any -> any any (msg:"Qatar Living"; appid:qatar_living; sid:1002853; rev:1)
alert tcp any any -> any any (msg:"Qatar University"; appid:qatar_university; sid:1002854; rev:1)
alert tcp any any -> any any (msg:"Qiita"; appid:qiita; sid:1002855; rev:1)
alert tcp any any -> any any (msg:"Qatar Ministry of Interior"; appid:qatar_ministry_of_interior; sid:1002856; rev:1)
alert tcp any any -> any any (msg:"Quizlet"; appid:quizlet; sid:1002857; rev:1)
alert tcp any any -> any any (msg:"RarBG"; appid:rarbg; sid:1002858; rev:1)
alert tcp any any -> any any (msg:"RedTube"; appid:redtube; sid:1002859; rev:1)
alert tcp any any -> any any (msg:"ReImage"; appid:reimage; sid:1002860; rev:1)
alert tcp any any -> any any (msg:"ResearchGate"; appid:researchgate; sid:1002861; rev:1)
alert tcp any any -> any any (msg:"Russia Today"; appid:russia_today; sid:1002862; rev:1)
alert tcp any any -> any any (msg:"Ruten"; appid:ruten; sid:1002863; rev:1)
alert tcp any any -> any any (msg:"RuTracker"; appid:rutracker; sid:1002864; rev:1)
alert tcp any any -> any any (msg:"Sabah"; appid:sabah; sid:1002865; rev:1)
alert tcp any any -> any any (msg:"Sahibinden"; appid:sahibinden; sid:1002866; rev:1)
alert tcp any any -> any any (msg:"SaveFrom"; appid:savefrom; sid:1002867; rev:1)
alert tcp any any -> any any (msg:"Sberbank of Russia"; appid:sberbank_of_russia; sid:1002868; rev:1)
alert tcp any any -> any any (msg:"State Bank of India"; appid:state_bank_of_india; sid:1002869; rev:1)
alert tcp any any -> any any (msg:"ScienceDirect"; appid:sciencedirect; sid:1002870; rev:1)
alert tcp any any -> any any (msg:"Mama.cn"; appid:mama.cn; sid:1002871; rev:1)
alert tcp any any -> any any (msg:"Manorama"; appid:manorama; sid:1002872; rev:1)
alert tcp any any -> any any (msg:"Middle East Broadcasting Center"; appid:middle_east_broadcasting_center; sid:1002873; rev:1)
alert tcp any any -> any any (msg:"Medium"; appid:medium; sid:1002874; rev:1)
alert tcp any any -> any any (msg:"Mega"; appid:mega; sid:1002875; rev:1)
alert tcp any any -> any any (msg:"Merdeka.com"; appid:merdeka.com; sid:1002876; rev:1)
alert tcp any any -> any any (msg:"Milliyet"; appid:milliyet; sid:1002877; rev:1)
alert tcp any any -> any any (msg:"MyWay"; appid:myway; sid:1002878; rev:1)
alert tcp any any -> any any (msg:"Nametests"; appid:nametests; sid:1002879; rev:1)
alert tcp any any -> any any (msg:"Naukri.com"; appid:naukri.com; sid:1002880; rev:1)
alert tcp any any -> any any (msg:"Ndtv"; appid:ndtv; sid:1002881; rev:1)
alert tcp any any -> any any (msg:"NowNews"; appid:nownews; sid:1002882; rev:1)
alert tcp any any -> any any (msg:"OfferJuice"; appid:offerjuice; sid:1002883; rev:1)
alert tcp any any -> any any (msg:"OkeZone"; appid:okezone; sid:1002884; rev:1)
alert tcp any any -> any any (msg:"Olx.pl"; appid:olx.pl; sid:1002885; rev:1)
alert tcp any any -> any any (msg:"OnClick"; appid:onclick; sid:1002886; rev:1)
alert tcp any any -> any any (msg:"OneDio"; appid:onedio; sid:1002887; rev:1)
alert tcp any any -> any any (msg:"Onet"; appid:onet; sid:1002888; rev:1)
alert tcp any any -> any any (msg:"Orange"; appid:orange; sid:1002889; rev:1)
alert tcp any any -> any any (msg:"Ouoio.io"; appid:ouoio.io; sid:1002890; rev:1)
alert tcp any any -> any any (msg:"Paytm"; appid:paytm; sid:1002891; rev:1)
alert tcp any any -> any any (msg:"PixaBay"; appid:pixabay; sid:1002892; rev:1)
alert tcp any any -> any any (msg:"Pixiv"; appid:pixiv; sid:1002893; rev:1)
alert tcp any any -> any any (msg:"Pixnet"; appid:pixnet; sid:1002894; rev:1)
alert tcp any any -> any any (msg:"PopAds"; appid:popads; sid:1002895; rev:1)
alert tcp any any -> any any (msg:"PopCash"; appid:popcash; sid:1002896; rev:1)
alert tcp any any -> any any (msg:"Ppomppu"; appid:ppomppu; sid:1002897; rev:1)
alert tcp any any -> any any (msg:"PrivateHomeClips"; appid:privatehomeclips; sid:1002898; rev:1)
alert tcp any any -> any any (msg:"Bilibili"; appid:bilibili; sid:1002899; rev:1)
alert tcp any any -> any any (msg:"BillDesk"; appid:billdesk; sid:1002900; rev:1)
alert tcp any any -> any any (msg:"Bitauto"; appid:bitauto; sid:1002901; rev:1)
alert tcp any any -> any any (msg:"Blasting News"; appid:blasting_news; sid:1002902; rev:1)
alert tcp any any -> any any (msg:"Blogfa"; appid:blogfa; sid:1002903; rev:1)
alert tcp any any -> any any (msg:"Blogfa"; appid:blog.jp; sid:1002904; rev:1)
alert tcp any any -> any any (msg:"Bukalapak"; appid:bukalapak; sid:1002905; rev:1)
alert tcp any any -> any any (msg:"BuzzHand"; appid:buzzhand; sid:1002906; rev:1)
alert tcp any any -> any any (msg:"Caijing"; appid:caijing; sid:1002907; rev:1)
alert tcp any any -> any any (msg:"CCTV.com"; appid:cctv.com; sid:1002908; rev:1)
alert tcp any any -> any any (msg:"Ci123"; appid:ci123; sid:1002909; rev:1)
alert tcp any any -> any any (msg:"Fingta"; appid:fingta; sid:1002910; rev:1)
alert tcp any any -> any any (msg:"Freepik"; appid:freepik; sid:1002911; rev:1)
alert tcp any any -> any any (msg:"FRIV"; appid:friv; sid:1002912; rev:1)
alert tcp any any -> any any (msg:"GamerCom"; appid:gamercom; sid:1002913; rev:1)
alert tcp any any -> any any (msg:"GAMERSKY"; appid:gamersky; sid:1002914; rev:1)
alert tcp any any -> any any (msg:"GearBest"; appid:gearbest; sid:1002915; rev:1)
alert tcp any any -> any any (msg:"Gfycat"; appid:gfycat; sid:1002916; rev:1)
alert tcp any any -> any any (msg:"GIPHY"; appid:giphy; sid:1002917; rev:1)
alert tcp any any -> any any (msg:"GISMETEO"; appid:gismeteo; sid:1002918; rev:1)
alert tcp any any -> any any (msg:"Globo"; appid:globo; sid:1002919; rev:1)
alert tcp any any -> any any (msg:"GSMArena"; appid:gsmarena; sid:1002920; rev:1)
alert tcp any any -> any any (msg:"Gulf Times"; appid:gulf_times; sid:1002921; rev:1)
alert tcp any any -> any any (msg:"Haber7"; appid:haber7; sid:1002922; rev:1)
alert tcp any any -> any any (msg:"HandyCafe"; appid:handycafe; sid:1002923; rev:1)
alert tcp any any -> any any (msg:"Hatena Blog"; appid:hatena_blog; sid:1002924; rev:1)
alert tcp any any -> any any (msg:"HDFC Bank"; appid:hdfc_bank; sid:1002925; rev:1)
alert tcp any any -> any any (msg:"H&M"; appid:h&m; sid:1002926; rev:1)
alert tcp any any -> any any (msg:"HOLACOM"; appid:holacom; sid:1002927; rev:1)
alert tcp any any -> any any (msg:"Huanqiu"; appid:huanqiu; sid:1002928; rev:1)
alert tcp any any -> any any (msg:"HubSpot"; appid:hubspot; sid:1002929; rev:1)
alert tcp any any -> any any (msg:"Hurriyet"; appid:hurriyet; sid:1002930; rev:1)
alert tcp any any -> any any (msg:"ICICI Bank"; appid:icici_bank; sid:1002931; rev:1)
alert tcp any any -> any any (msg:"ImpressCoJp"; appid:impresscojp; sid:1002932; rev:1)
alert tcp any any -> any any (msg:"IMzog"; appid:imzog; sid:1002933; rev:1)
alert tcp any any -> any any (msg:"Scribol"; appid:scribol; sid:1002934; rev:1)
alert tcp any any -> any any (msg:"Seasonvar"; appid:seasonvar; sid:1002935; rev:1)
alert tcp any any -> any any (msg:"Seznam"; appid:seznam; sid:1002936; rev:1)
alert tcp any any -> any any (msg:"Shopify"; appid:shopify; sid:1002937; rev:1)
alert tcp any any -> any any (msg:"Shorte"; appid:shorte; sid:1002938; rev:1)
alert tcp any any -> any any (msg:"SiteAdvisor"; appid:siteadvisor; sid:1002939; rev:1)
alert tcp any any -> any any (msg:"Slither"; appid:slither; sid:1002940; rev:1)
alert tcp any any -> any any (msg:"Snapdeal"; appid:snapdeal; sid:1002941; rev:1)
alert tcp any any -> any any (msg:"SO.com"; appid:so.com; sid:1002942; rev:1)
alert tcp any any -> any any (msg:"Souq"; appid:souq; sid:1002943; rev:1)
alert tcp any any -> any any (msg:"SpankBang"; appid:spankbang; sid:1002944; rev:1)
alert tcp any any -> any any (msg:"Subscene"; appid:subscene; sid:1002945; rev:1)
alert tcp any any -> any any (msg:"Suning"; appid:suning; sid:1002946; rev:1)
alert tcp any any -> any any (msg:"Tabelog"; appid:tabelog; sid:1002947; rev:1)
alert tcp any any -> any any (msg:"Taboola"; appid:taboola; sid:1002948; rev:1)
alert tcp any any -> any any (msg:"Taleo"; appid:taleo; sid:1002949; rev:1)
alert tcp any any -> any any (msg:"TEEPR"; appid:teepr; sid:1002950; rev:1)
alert tcp any any -> any any (msg:"The Sport Bible"; appid:the_sport_bible; sid:1002951; rev:1)
alert tcp any any -> any any (msg:"Tokopedia"; appid:tokopedia; sid:1002952; rev:1)
alert tcp any any -> any any (msg:"Trello"; appid:trello; sid:1002953; rev:1)
alert tcp any any -> any any (msg:"TribunNews"; appid:tribunnews; sid:1002954; rev:1)
alert tcp any any -> any any (msg:"CK101"; appid:ck101; sid:1002955; rev:1)
alert tcp any any -> any any (msg:"Clicksgear"; appid:clicksgear; sid:1002956; rev:1)
alert tcp any any -> any any (msg:"Clip Converter"; appid:clip_converter; sid:1002957; rev:1)
alert tcp any any -> any any (msg:"Cnblogs"; appid:cnblogs; sid:1002958; rev:1)
alert tcp any any -> any any (msg:"CNNIC"; appid:cnnic; sid:1002959; rev:1)
alert tcp any any -> any any (msg:"CNTV"; appid:cntv; sid:1002960; rev:1)
alert tcp any any -> any any (msg:"Coc Coc"; appid:coc_coc; sid:1002961; rev:1)
alert tcp any any -> any any (msg:"Cricbuzz.com"; appid:cricbuzz.com; sid:1002962; rev:1)
alert tcp any any -> any any (msg:"Dainik Bhaskar"; appid:dainik_bhaskar; sid:1002963; rev:1)
alert tcp any any -> any any (msg:"Dainik Bhaskar"; appid:detikcom; sid:1002964; rev:1)
alert tcp any any -> any any (msg:"Digikala"; appid:digikala; sid:1002965; rev:1)
alert tcp any any -> any any (msg:"DINGIT.TV"; appid:dingit.tv; sid:1002966; rev:1)
alert tcp any any -> any any (msg:"Diply"; appid:diply; sid:1002967; rev:1)
alert tcp any any -> any any (msg:"DirectREV"; appid:directrev; sid:1002968; rev:1)
alert tcp any any -> any any (msg:"DMM"; appid:dmm; sid:1002969; rev:1)
alert tcp any any -> any any (msg:"Douyu"; appid:douyu; sid:1002970; rev:1)
alert tcp any any -> any any (msg:"Eastday"; appid:eastday; sid:1002971; rev:1)
alert tcp any any -> any any (msg:"Eastday"; appid:ekantipur; sid:1002972; rev:1)
alert tcp any any -> any any (msg:"Eksi sozluk"; appid:eksi_sozluk; sid:1002973; rev:1)
alert tcp any any -> any any (msg:"Elmogaz"; appid:elmogaz; sid:1002974; rev:1)
alert tcp any any -> any any (msg:"EL PAIS"; appid:el_pais; sid:1002975; rev:1)
alert tcp any any -> any any (msg:"ETtoday"; appid:ettoday; sid:1002976; rev:1)
alert tcp any any -> any any (msg:"ExoClick"; appid:exoclick; sid:1002977; rev:1)
alert tcp any any -> any any (msg:"Instructure"; appid:instructure; sid:1002978; rev:1)
alert tcp any any -> any any (msg:"IRCTC"; appid:irctc; sid:1002979; rev:1)
alert tcp any any -> any any (msg:"Island Mob"; appid:island_mob; sid:1002980; rev:1)
alert tcp any any -> any any (msg:"Myntra.com"; appid:myntra.com; sid:1002981; rev:1)
alert tcp any any -> any any (msg:"Kakaku"; appid:kakaku; sid:1002982; rev:1)
alert tcp any any -> any any (msg:"KapanLagi"; appid:kapanlagi; sid:1002983; rev:1)
alert tcp any any -> any any (msg:"KASKUS"; appid:kaskus; sid:1002984; rev:1)
alert tcp any any -> any any (msg:"KinoGo"; appid:kinogo; sid:1002985; rev:1)
alert tcp any any -> any any (msg:"Kinopoisk"; appid:kinopoisk; sid:1002986; rev:1)
alert tcp any any -> any any (msg:"KissAnime"; appid:kissanime; sid:1002987; rev:1)
alert tcp any any -> any any (msg:"Kompas.com"; appid:kompas.com; sid:1002988; rev:1)
alert tcp any any -> any any (msg:"The LAD Bible"; appid:the_lad_bible; sid:1002989; rev:1)
alert tcp any any -> any any (msg:"La Repubblica"; appid:la_repubblica; sid:1002990; rev:1)
alert tcp any any -> any any (msg:"Libero.it"; appid:libero.it; sid:1002991; rev:1)
alert tcp any any -> any any (msg:"LIFE"; appid:life; sid:1002992; rev:1)
alert tcp any any -> any any (msg:"LifeBuzz"; appid:lifebuzz; sid:1002993; rev:1)
alert tcp any any -> any any (msg:"Lifehacker"; appid:lifehacker; sid:1002994; rev:1)
alert tcp any any -> any any (msg:"Likes"; appid:likes; sid:1002995; rev:1)
alert tcp any any -> any any (msg:"Liputan 6"; appid:liputan_6; sid:1002996; rev:1)
alert tcp any any -> any any (msg:"LiveJasmin"; appid:livejasmin; sid:1002997; rev:1)
alert tcp any any -> any any (msg:"LTN"; appid:ltn; sid:1002998; rev:1)
alert tcp any any -> any any (msg:"Udemy"; appid:udemy; sid:1002999; rev:1)
alert tcp any any -> any any (msg:"UDN"; appid:udn; sid:1003000; rev:1)
alert tcp any any -> any any (msg:"Upornia"; appid:upornia; sid:1003001; rev:1)
alert tcp any any -> any any (msg:"Upornia"; appid:ups.com; sid:1003002; rev:1)
alert tcp any any -> any any (msg:"Uptodown"; appid:uptodown; sid:1003003; rev:1)
alert tcp any any -> any any (msg:"Upwork"; appid:upwork; sid:1003004; rev:1)
alert tcp any any -> any any (msg:"UrduPoint.com"; appid:urdupoint.com; sid:1003005; rev:1)
alert tcp any any -> any any (msg:"Varzesh3"; appid:varzesh3; sid:1003006; rev:1)
alert tcp any any -> any any (msg:"The Verge"; appid:the_verge; sid:1003007; rev:1)
alert tcp any any -> any any (msg:"VICE"; appid:vice; sid:1003008; rev:1)
alert tcp any any -> any any (msg:"Viral Thread"; appid:viral_thread; sid:1003009; rev:1)
alert tcp any any -> any any (msg:"Viral Thread"; appid:weblio; sid:1003010; rev:1)
alert tcp any any -> any any (msg:"Webtretho"; appid:webtretho; sid:1003011; rev:1)
alert tcp any any -> any any (msg:"Western Journalism"; appid:western_journalism; sid:1003012; rev:1)
alert tcp any any -> any any (msg:"wikiHow"; appid:wikihow; sid:1003013; rev:1)
alert tcp any any -> any any (msg:"Wirtualna Polska"; appid:wirtualna_polska; sid:1003014; rev:1)
alert tcp any any -> any any (msg:"WIX"; appid:wix; sid:1003015; rev:1)
alert tcp any any -> any any (msg:"Wowhead"; appid:wowhead; sid:1003016; rev:1)
alert tcp any any -> any any (msg:"Xcar"; appid:xcar; sid:1003017; rev:1)
alert tcp any any -> any any (msg:"Xfinity"; appid:xfinity; sid:1003018; rev:1)
alert tcp any any -> any any (msg:"Xnxx"; appid:xnxx; sid:1003019; rev:1)
alert tcp any any -> any any (msg:"Xywycom"; appid:xywycom; sid:1003020; rev:1)
alert tcp any any -> any any (msg:"Youm7"; appid:youm7; sid:1003021; rev:1)
alert tcp any any -> any any (msg:"Youth.cn"; appid:youth.cn; sid:1003022; rev:1)
alert tcp any any -> any any (msg:"YouTubeMp3"; appid:youtubemp3; sid:1003023; rev:1)
alert tcp any any -> any any (msg:"Google Sign in"; appid:google_sign_in; sid:1003024; rev:1)
alert tcp any any -> any any (msg:"Xiaomi"; appid:xiaomi; sid:1003025; rev:1)
alert tcp any any -> any any (msg:"Venmo"; appid:venmo; sid:1003026; rev:1)
alert tcp any any -> any any (msg:"Google Inbox"; appid:google_inbox; sid:1003027; rev:1)
alert tcp any any -> any any (msg:"Zoom"; appid:zoom; sid:1003028; rev:1)
alert tcp any any -> any any (msg:"Uptobox"; appid:uptobox; sid:1003029; rev:1)
alert tcp any any -> any any (msg:"Tus Files"; appid:tus_files; sid:1003030; rev:1)
alert tcp any any -> any any (msg:"Marine Traffic"; appid:marine_traffic; sid:1003031; rev:1)
alert tcp any any -> any any (msg:"Opera VPN"; appid:opera_vpn; sid:1003032; rev:1)
alert tcp any any -> any any (msg:"Power BI"; appid:power_bi; sid:1003033; rev:1)
alert tcp any any -> any any (msg:"MKRU"; appid:mkru; sid:1003034; rev:1)
alert tcp any any -> any any (msg:"MKRU Streaming"; appid:mkru_streaming; sid:1003035; rev:1)
alert tcp any any -> any any (msg:"Plex TV"; appid:plex_tv; sid:1003036; rev:1)
alert tcp any any -> any any (msg:"VMware Remote Authentication"; appid:vmware-remote-a; sid:1003037; rev:1)
alert tcp any any -> any any (msg:"VMware Remote Authentication"; appid:iflix; sid:1003038; rev:1)
alert tcp any any -> any any (msg:"U.S State"; appid:u.s_state; sid:1003039; rev:1)
alert tcp any any -> any any (msg:"Azure cloud portal"; appid:azure_cloud_portal; sid:1003040; rev:1)
alert tcp any any -> any any (msg:"CimaClub"; appid:cimaclub; sid:1003041; rev:1)
alert tcp any any -> any any (msg:"Mathrubhumi"; appid:mathrubhumi; sid:1003042; rev:1)
alert tcp any any -> any any (msg:"MawDoo3"; appid:mawdoo3; sid:1003043; rev:1)
alert tcp any any -> any any (msg:"Oman Airways"; appid:oman_airways; sid:1003044; rev:1)
alert tcp any any -> any any (msg:"Watan"; appid:watan; sid:1003045; rev:1)
alert tcp any any -> any any (msg:"Chrome webstore"; appid:chrome_webstore; sid:1003046; rev:1)
alert tcp any any -> any any (msg:"Office365 Admin portal"; appid:office365_admin_portal; sid:1003047; rev:1)
alert tcp any any -> any any (msg:"Windscribe"; appid:windscribe; sid:1003048; rev:1)
alert tcp any any -> any any (msg:"Thin Manager TFTP"; appid:thin-manager; sid:1003049; rev:1)
alert tcp any any -> any any (msg:"Zoho SalesIQ Chat"; appid:zoho_salesiq_chat; sid:1003050; rev:1)
alert tcp any any -> any any (msg:"Zoho Social"; appid:zoho_social; sid:1003051; rev:1)
alert tcp any any -> any any (msg:"Zoho Connect"; appid:zoho_connect; sid:1003052; rev:1)
alert tcp any any -> any any (msg:"Zoho Docs"; appid:zoho_docs; sid:1003053; rev:1)
alert tcp any any -> any any (msg:"Zoho Assist"; appid:zoho_assist; sid:1003054; rev:1)
alert tcp any any -> any any (msg:"BitComet"; appid:bitcomet; sid:1003055; rev:1)
alert tcp any any -> any any (msg:"Microsoft Stream"; appid:microsoft_stream; sid:1003056; rev:1)
alert tcp any any -> any any (msg:"Kaspersky Network Agent"; appid:kaspersky_network_agent; sid:1003057; rev:1)
alert tcp any any -> any any (msg:"Elisa Viihde"; appid:elisa_viihde; sid:1003058; rev:1)
alert tcp any any -> any any (msg:"MTV3"; appid:mtv3; sid:1003059; rev:1)
alert tcp any any -> any any (msg:"Viaplay"; appid:viaplay; sid:1003060; rev:1)
alert tcp any any -> any any (msg:"Yle Areena"; appid:yle_areena; sid:1003061; rev:1)
alert tcp any any -> any any (msg:"Lyft"; appid:lyft; sid:1003062; rev:1)
alert tcp any any -> any any (msg:"Sony LIV"; appid:sony_liv; sid:1003063; rev:1)
alert tcp any any -> any any (msg:"Helpshift"; appid:helpshift; sid:1003064; rev:1)
alert tcp any any -> any any (msg:"Edge Chromium"; appid:edge_chromium; sid:1003065; rev:1)
alert tcp any any -> any any (msg:"Edge Chromium"; appid:dls-mon; sid:1003066; rev:1)
alert tcp any any -> any any (msg:"DN6-NLM-AUD"; appid:dn6-nlm-aud; sid:1003067; rev:1)
alert tcp any any -> any any (msg:"EMFIS-CNTL"; appid:emfis-cntl; sid:1003068; rev:1)
alert tcp any any -> any any (msg:"FLN-SPX"; appid:fln-spx; sid:1003069; rev:1)
alert tcp any any -> any any (msg:"LEGENT-2"; appid:legent-2; sid:1003070; rev:1)
alert tcp any any -> any any (msg:"MATIP-TYPE-B"; appid:matip-type-b; sid:1003071; rev:1)
alert tcp any any -> any any (msg:"NETSC-DEV"; appid:netsc-dev; sid:1003072; rev:1)
alert tcp any any -> any any (msg:"ORBIX-CFG-SSL"; appid:orbix-cfg-ssl; sid:1003073; rev:1)
alert tcp any any -> any any (msg:"SQL-NET"; appid:sql-net; sid:1003074; rev:1)
alert tcp any any -> any any (msg:"SQLSRV"; appid:sqlsrv; sid:1003075; rev:1)
alert tcp any any -> any any (msg:"UUCP-PATH"; appid:uucp-path; sid:1003076; rev:1)
alert tcp any any -> any any (msg:"UUCP-RLOGIN"; appid:uucp-rlogin; sid:1003077; rev:1)
alert tcp any any -> any any (msg:"UltraView CCS"; appid:ultraview-ccs; sid:1003078; rev:1)
alert tcp any any -> any any (msg:"Prodigy Games"; appid:prodigy_games; sid:1003079; rev:1)
alert tcp any any -> any any (msg:"NelsonNet"; appid:nelsonnet; sid:1003080; rev:1)
alert tcp any any -> any any (msg:"Onshape"; appid:onshape; sid:1003081; rev:1)
alert tcp any any -> any any (msg:"Noteflight"; appid:noteflight; sid:1003082; rev:1)
alert tcp any any -> any any (msg:"Coolmath"; appid:coolmath; sid:1003083; rev:1)
alert tcp any any -> any any (msg:"Cloudinary"; appid:cloudinary; sid:1003084; rev:1)
alert tcp any any -> any any (msg:"Drift"; appid:drift; sid:1003085; rev:1)
alert tcp any any -> any any (msg:"Omron FINS"; appid:omron-fins; sid:1003086; rev:1)
alert tcp any any -> any any (msg:"Princess Polly"; appid:princess_polly; sid:1003087; rev:1)
alert tcp any any -> any any (msg:"Zscaler"; appid:zscaler; sid:1003088; rev:1)
alert tcp any any -> any any (msg:"Stile"; appid:stile; sid:1003089; rev:1)
alert tcp any any -> any any (msg:"Catholic Education Australia"; appid:catholic_education_australia; sid:1003090; rev:1)
alert tcp any any -> any any (msg:"Font Awesome"; appid:font_awesome; sid:1003091; rev:1)
alert tcp any any -> any any (msg:"Firefly Education"; appid:firefly_education; sid:1003092; rev:1)
alert tcp any any -> any any (msg:"Grammarly"; appid:grammarly; sid:1003093; rev:1)
alert tcp any any -> any any (msg:"Honey"; appid:honey; sid:1003094; rev:1)
alert tcp any any -> any any (msg:"Walkme"; appid:walkme; sid:1003095; rev:1)
alert tcp any any -> any any (msg:"Workplace by Facebook"; appid:workplace_by_facebook; sid:1003096; rev:1)
alert tcp any any -> any any (msg:"Adobe Fonts"; appid:adobe_fonts; sid:1003097; rev:1)
alert tcp any any -> any any (msg:"Amp"; appid:amp; sid:1003098; rev:1)
alert tcp any any -> any any (msg:"Tidal"; appid:tidal; sid:1003099; rev:1)
alert tcp any any -> any any (msg:"Appier"; appid:appier; sid:1003100; rev:1)
alert tcp any any -> any any (msg:"Tappx"; appid:tappx; sid:1003101; rev:1)
alert tcp any any -> any any (msg:"NrData"; appid:nrdata; sid:1003102; rev:1)
alert tcp any any -> any any (msg:"Twinkl"; appid:twinkl; sid:1003103; rev:1)
alert tcp any any -> any any (msg:"Zerodha"; appid:zerodha; sid:1003104; rev:1)
alert tcp any any -> any any (msg:"Ballina Beach Village"; appid:ballina_beach_village; sid:1003105; rev:1)
alert tcp any any -> any any (msg:"TAFE NSW"; appid:tafe_nsw; sid:1003106; rev:1)
alert tcp any any -> any any (msg:"DepartApp"; appid:departapp; sid:1003107; rev:1)
alert tcp any any -> any any (msg:"Stripe"; appid:stripe; sid:1003108; rev:1)
alert tcp any any -> any any (msg:"DNS over TLS"; appid:dns-over-tls; sid:1003109; rev:1)
alert tcp any any -> any any (msg:"Microsoft Teams"; appid:microsoft_teams; sid:1003110; rev:1)
alert tcp any any -> any any (msg:"Disney Plus"; appid:disney_plus; sid:1003111; rev:1)
alert tcp any any -> any any (msg:"Monster VPN"; appid:monster_vpn; sid:1003112; rev:1)
alert tcp any any -> any any (msg:"Apple TV Plus"; appid:apple_tv_plus; sid:1003113; rev:1)
alert tcp any any -> any any (msg:"Demio"; appid:demio; sid:1003114; rev:1)
alert tcp any any -> any any (msg:"Smartsheet"; appid:smartsheet; sid:1003115; rev:1)
alert tcp any any -> any any (msg:"Marco Polo"; appid:marco_polo; sid:1003116; rev:1)
alert tcp any any -> any any (msg:"Apple News"; appid:apple_news; sid:1003117; rev:1)
alert tcp any any -> any any (msg:"DNS over HTTPS"; appid:dns_over_https; sid:1003118; rev:1)
alert tcp any any -> any any (msg:"Adobe Update"; appid:adobe_update; sid:1003119; rev:1)
alert tcp any any -> any any (msg:"DriveHQ"; appid:drivehq; sid:1003120; rev:1)
alert tcp any any -> any any (msg:"Zoom Upload"; appid:zoom_upload; sid:1003121; rev:1)
alert tcp any any -> any any (msg:"Zoom Download"; appid:zoom_download; sid:1003122; rev:1)
alert tcp any any -> any any (msg:"Zoom Meeting"; appid:zoom_meeting; sid:1003123; rev:1)
alert tcp any any -> any any (msg:"Twilio"; appid:twilio; sid:1003124; rev:1)
alert tcp any any -> any any (msg:"Fiserv"; appid:fiserv; sid:1003125; rev:1)
alert tcp any any -> any any (msg:"Jaspersoft"; appid:jaspersoft; sid:1003126; rev:1)
alert tcp any any -> any any (msg:"QlikView"; appid:qlikview; sid:1003127; rev:1)
alert tcp any any -> any any (msg:"RingCentral"; appid:ringcentral; sid:1003128; rev:1)
alert tcp any any -> any any (msg:"Tableau"; appid:tableau; sid:1003129; rev:1)
alert tcp any any -> any any (msg:"OneLogin"; appid:onelogin; sid:1003130; rev:1)
alert tcp any any -> any any (msg:"Instagram Media"; appid:instagram_media; sid:1003131; rev:1)
alert tcp any any -> any any (msg:"GRPC"; appid:grpc; sid:1003132; rev:1)
alert tcp any any -> any any (msg:"SMBv1"; appid:smbv1; sid:1003133; rev:1)
alert tcp any any -> any any (msg:"SMBv2"; appid:smbv2; sid:1003134; rev:1)
alert tcp any any -> any any (msg:"SMBv3-encrypted"; appid:smbv3-encrypted; sid:1003135; rev:1)
alert tcp any any -> any any (msg:"Duo Security"; appid:duo_security; sid:1003136; rev:1)
alert tcp any any -> any any (msg:"Firefox Update"; appid:firefox_update; sid:1003137; rev:1)
alert tcp any any -> any any (msg:"Waze"; appid:waze; sid:1003138; rev:1)
alert tcp any any -> any any (msg:"Vagrant"; appid:vagrant; sid:1003139; rev:1)
alert tcp any any -> any any (msg:"Google Meet"; appid:google_meet; sid:1003140; rev:1)
alert tcp any any -> any any (msg:"Vocera"; appid:vocera; sid:1003141; rev:1)
alert tcp any any -> any any (msg:"Discord"; appid:discord; sid:1003142; rev:1)
alert tcp any any -> any any (msg:"Discord"; appid:libssh2; sid:1003143; rev:1)
alert tcp any any -> any any (msg:"Trilead SSH-2"; appid:trilead_ssh-2; sid:1003144; rev:1)
alert tcp any any -> any any (msg:"WinSCP"; appid:winscp; sid:1003145; rev:1)
alert tcp any any -> any any (msg:"MobaXterm"; appid:mobaxterm; sid:1003146; rev:1)
alert tcp any any -> any any (msg:"Getscreen.me"; appid:getscreen.me; sid:1003147; rev:1)
alert tcp any any -> any any (msg:"Nice"; appid:nice; sid:1003148; rev:1)
alert tcp any any -> any any (msg:"Zalo"; appid:zalo; sid:1003149; rev:1)
alert tcp any any -> any any (msg:"Wireguard"; appid:wireguard; sid:1003150; rev:1)
alert tcp any any -> any any (msg:"FL-net"; appid:fl-net; sid:1003151; rev:1)
alert tcp any any -> any any (msg:"SMBv3-unencrypted"; appid:smbv3-unencrypted; sid:1003152; rev:1)
alert tcp any any -> any any (msg:"PUBg"; appid:pubg; sid:1003153; rev:1)
alert tcp any any -> any any (msg:"Thousand Eyes"; appid:thousand_eyes; sid:1003154; rev:1)
alert tcp any any -> any any (msg:"Logitech"; appid:logitech; sid:1003155; rev:1)
alert tcp any any -> any any (msg:"Lenovo"; appid:lenovo; sid:1003156; rev:1)
alert tcp any any -> any any (msg:"iPass"; appid:ipass; sid:1003157; rev:1)
alert tcp any any -> any any (msg:"Dameware"; appid:dameware; sid:1003158; rev:1)
alert tcp any any -> any any (msg:"ENIP"; appid:enip; sid:1003159; rev:1)
alert tcp any any -> any any (msg:"CIP"; appid:cip; sid:1003160; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Single Command"; appid:iec_104_single_command; sid:1003161; rev:1)
alert tcp any any -> any any (msg:"MMS getNameList"; appid:mms_getnamelist; sid:1003162; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Control Bitstring 32 bits"; appid:iec_104_control_bitstring_32_bits; sid:1003163; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Double Command"; appid:iec_104_double_command; sid:1003164; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Interrogation Command"; appid:iec_104_interrogation_command; sid:1003165; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Regulating Step Command"; appid:iec_104_regulating_step_command; sid:1003166; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Setpoint Command Normalized"; appid:iec_104_setpoint_command_normalized; sid:1003167; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Setpoint Command Scaled"; appid:iec_104_setpoint_command_scaled; sid:1003168; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Setpoint Command Short Float"; appid:iec_104_setpoint_command_short_float; sid:1003169; rev:1)
alert tcp any any -> any any (msg:"IEC 104 End of Initialization"; appid:iec_104_end_of_initialization; sid:1003170; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Measured Normalized with Long Time"; appid:iec_104_measured_normalized_with_long_time; sid:1003171; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Single Point Info with Long Time"; appid:iec_104_single_point_info_with_long_time; sid:1003172; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Step Position Info"; appid:iec_104_step_position_info; sid:1003173; rev:1)
alert tcp any any -> any any (msg:"IEC 104 TESTFR CON"; appid:iec_104_testfr_con; sid:1003174; rev:1)
alert tcp any any -> any any (msg:"IEC 104 TESTFR ACT"; appid:iec_104_testfr_act; sid:1003175; rev:1)
alert tcp any any -> any any (msg:"IEC 104 STARTDT CON"; appid:iec_104_startdt_con; sid:1003176; rev:1)
alert tcp any any -> any any (msg:"IEC 104 STARTDT ACT"; appid:iec_104_startdt_act; sid:1003177; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Double Point Info"; appid:iec_104_double_point_info; sid:1003178; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Monitor Bitstring 32 bit"; appid:iec_104_monitor_bitstring_32_bit; sid:1003179; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Measured Normalized"; appid:iec_104_measured_normalized; sid:1003180; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Measured Scaled"; appid:iec_104_measured_scaled; sid:1003181; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Integrated Totals"; appid:iec_104_integrated_totals; sid:1003182; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Packed Single Point"; appid:iec_104_packed_single_point; sid:1003183; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Measured Normalized without Quality Descriptor"; appid:iec_104_measured_normalized_without_quality_descriptor; sid:1003184; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Double Point Info with Long Time"; appid:iec_104_double_point_info_with_long_time; sid:1003185; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Measured Short Float"; appid:iec_104_measured_short_float; sid:1003186; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Single Point Info"; appid:iec_104_single_point_info; sid:1003187; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Step Position Info with Long Time"; appid:iec_104_step_position_info_with_long_time; sid:1003188; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Bitstring 32 bit with Long Time"; appid:iec_104_bitstring_32_bit_with_long_time; sid:1003189; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Measured Scaled with Long Time"; appid:iec_104_measured_scaled_with_long_time; sid:1003190; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Measured Short Float with Long Time"; appid:iec_104_measured_short_float_with_long_time; sid:1003191; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Integrated Totals with Long Time"; appid:iec_104_integrated_totals_with_long_time; sid:1003192; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Event of Protection with Long Time"; appid:iec_104_event_of_protection_with_long_time; sid:1003193; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Packed Start Event with Long Time"; appid:iec_104_packed_start_event_with_long_time; sid:1003194; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Packed Output Circuit Info with Long Time"; appid:iec_104_packed_output_circuit_info_with_long_time; sid:1003195; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Single Command with Long Time"; appid:iec_104_single_command_with_long_time; sid:1003196; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Double Command with Long Time"; appid:iec_104_double_command_with_long_time; sid:1003197; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Regulating Step Command with Long Time"; appid:iec_104_regulating_step_command_with_long_time; sid:1003198; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Setpoint Command Normalized with Long Time"; appid:iec_104_setpoint_command_normalized_with_long_time; sid:1003199; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Setpoint Command Scaled with Long Time"; appid:iec_104_setpoint_command_scaled_with_long_time; sid:1003200; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Setpoint Command Short Float with Long Time"; appid:iec_104_setpoint_command_short_float_with_long_time; sid:1003201; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Bitstring 32 bit Command with Long Time"; appid:iec_104_bitstring_32_bit_command_with_long_time; sid:1003202; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Counter Interrogation Command"; appid:iec_104_counter_interrogation_command; sid:1003203; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Read Command"; appid:iec_104_read_command; sid:1003204; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Clock Synchronization Command"; appid:iec_104_clock_synchronization_command; sid:1003205; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Reset Process Command"; appid:iec_104_reset_process_command; sid:1003206; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Test Command with Long Time"; appid:iec_104_test_command_with_long_time; sid:1003207; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Parameter of Measured Normalized"; appid:iec_104_parameter_of_measured_normalized; sid:1003208; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Parameter of Measured Scaled"; appid:iec_104_parameter_of_measured_scaled; sid:1003209; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Parameter of Measured Short Float"; appid:iec_104_parameter_of_measured_short_float; sid:1003210; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Parameter Activation"; appid:iec_104_parameter_activation; sid:1003211; rev:1)
alert tcp any any -> any any (msg:"IEC 104 File Ready"; appid:iec_104_file_ready; sid:1003212; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Section Ready"; appid:iec_104_section_ready; sid:1003213; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Call directory Select File"; appid:iec_104_call_directory_select_file; sid:1003214; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Last Section Last Segment"; appid:iec_104_last_section_last_segment; sid:1003215; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Ack File Ack Section"; appid:iec_104_ack_file_ack_section; sid:1003216; rev:1)
alert tcp any any -> any any (msg:"IEC 104 List Segment"; appid:iec_104_list_segment; sid:1003217; rev:1)
alert tcp any any -> any any (msg:"IEC 104 List Directory"; appid:iec_104_list_directory; sid:1003218; rev:1)
alert tcp any any -> any any (msg:"IEC 104 Query Log"; appid:iec_104_query_log; sid:1003219; rev:1)
alert tcp any any -> any any (msg:"Modbus Read Coils"; appid:modbus_read_coils; sid:1003220; rev:1)
alert tcp any any -> any any (msg:"Modbus Read Discrete Inputs"; appid:modbus_read_discrete_inputs; sid:1003221; rev:1)
alert tcp any any -> any any (msg:"Modbus Read Holding Registers"; appid:modbus_read_holding_registers; sid:1003222; rev:1)
alert tcp any any -> any any (msg:"Modbus Read Input Registers"; appid:modbus_read_input_registers; sid:1003223; rev:1)
alert tcp any any -> any any (msg:"Modbus Write Single Coil"; appid:modbus_write_single_coil; sid:1003224; rev:1)
alert tcp any any -> any any (msg:"Modbus Write Single Register"; appid:modbus_write_single_register; sid:1003225; rev:1)
alert tcp any any -> any any (msg:"Modbus Write Multiple Coils"; appid:modbus_write_multiple_coils; sid:1003226; rev:1)
alert tcp any any -> any any (msg:"Modbus Write Multiple Registers"; appid:modbus_write_multiple_registers; sid:1003227; rev:1)
alert tcp any any -> any any (msg:"Modbus Read File Record"; appid:modbus_read_file_record; sid:1003228; rev:1)
alert tcp any any -> any any (msg:"Modbus Write File Record"; appid:modbus_write_file_record; sid:1003229; rev:1)
alert tcp any any -> any any (msg:"Modbus Mask Write Register"; appid:modbus_mask_write_register; sid:1003230; rev:1)
alert tcp any any -> any any (msg:"Modbus Read/Write Multiple Registers"; appid:modbus_read/write_multiple_registers; sid:1003231; rev:1)
alert tcp any any -> any any (msg:"Modbus Read FIFO Queue"; appid:modbus_read_fifo_queue; sid:1003232; rev:1)
alert tcp any any -> any any (msg:"Modbus Encapsulated Interface Transport"; appid:modbus_encapsulated_interface_transport; sid:1003233; rev:1)
alert tcp any any -> any any (msg:"MMS unconfirmedPDU"; appid:mms_unconfirmedpdu; sid:1003234; rev:1)
alert tcp any any -> any any (msg:"MMS confirmedResponsePDU"; appid:mms_confirmedresponsepdu; sid:1003235; rev:1)
alert tcp any any -> any any (msg:"MMS read"; appid:mms_read; sid:1003236; rev:1)
alert tcp any any -> any any (msg:"MMS write"; appid:mms_write; sid:1003237; rev:1)
alert tcp any any -> any any (msg:"MMS getVariableAccAttr"; appid:mms_getvariableaccattr; sid:1003238; rev:1)
alert tcp any any -> any any (msg:"MMS getNamedVariableListAttr"; appid:mms_getnamedvariablelistattr; sid:1003239; rev:1)
alert tcp any any -> any any (msg:"MMS confirmedErrorPDU"; appid:mms_confirmederrorpdu; sid:1003240; rev:1)
alert tcp any any -> any any (msg:"MMS status"; appid:mms_status; sid:1003241; rev:1)
alert tcp any any -> any any (msg:"MMS identify"; appid:mms_identify; sid:1003242; rev:1)
alert tcp any any -> any any (msg:"MMS rename"; appid:mms_rename; sid:1003243; rev:1)
alert tcp any any -> any any (msg:"MMS defineNamedVariable"; appid:mms_definenamedvariable; sid:1003244; rev:1)
alert tcp any any -> any any (msg:"MMS defineScatteredAccess"; appid:mms_definescatteredaccess; sid:1003245; rev:1)
alert tcp any any -> any any (msg:"MMS getScatteredAccessAttr"; appid:mms_getscatteredaccessattr; sid:1003246; rev:1)
alert tcp any any -> any any (msg:"MMS deleteVariableAccess"; appid:mms_deletevariableaccess; sid:1003247; rev:1)
alert tcp any any -> any any (msg:"MMS defineNamedVariableList"; appid:mms_definenamedvariablelist; sid:1003248; rev:1)
alert tcp any any -> any any (msg:"MMS deleteNamedVariableList"; appid:mms_deletenamedvariablelist; sid:1003249; rev:1)
alert tcp any any -> any any (msg:"MMS defineNamedType"; appid:mms_definenamedtype; sid:1003250; rev:1)
alert tcp any any -> any any (msg:"MMS getNamedTypeAttr"; appid:mms_getnamedtypeattr; sid:1003251; rev:1)
alert tcp any any -> any any (msg:"MMS deleteNamedType"; appid:mms_deletenamedtype; sid:1003252; rev:1)
alert tcp any any -> any any (msg:"MMS input"; appid:mms_input; sid:1003253; rev:1)
alert tcp any any -> any any (msg:"MMS output"; appid:mms_output; sid:1003254; rev:1)
alert tcp any any -> any any (msg:"MMS takeControl"; appid:mms_takecontrol; sid:1003255; rev:1)
alert tcp any any -> any any (msg:"MMS relinquishControl"; appid:mms_relinquishcontrol; sid:1003256; rev:1)
alert tcp any any -> any any (msg:"MMS defineSemaphore"; appid:mms_definesemaphore; sid:1003257; rev:1)
alert tcp any any -> any any (msg:"MMS deleteSemaphore"; appid:mms_deletesemaphore; sid:1003258; rev:1)
alert tcp any any -> any any (msg:"MMS reportSemaphoreStatus"; appid:mms_reportsemaphorestatus; sid:1003259; rev:1)
alert tcp any any -> any any (msg:"MMS reportPoolSemaphoreStatus"; appid:mms_reportpoolsemaphorestatus; sid:1003260; rev:1)
alert tcp any any -> any any (msg:"MMS reportSemaphoreEntryStatus"; appid:mms_reportsemaphoreentrystatus; sid:1003261; rev:1)
alert tcp any any -> any any (msg:"MMS initiateDownloadSequence"; appid:mms_initiatedownloadsequence; sid:1003262; rev:1)
alert tcp any any -> any any (msg:"MMS downloadSegment"; appid:mms_downloadsegment; sid:1003263; rev:1)
alert tcp any any -> any any (msg:"MMS terminateDownloadSequence"; appid:mms_terminatedownloadsequence; sid:1003264; rev:1)
alert tcp any any -> any any (msg:"MMS initiateUploadSequence"; appid:mms_initiateuploadsequence; sid:1003265; rev:1)
alert tcp any any -> any any (msg:"MMS uploadSegment"; appid:mms_uploadsegment; sid:1003266; rev:1)
alert tcp any any -> any any (msg:"MMS terminateUploadSequence"; appid:mms_terminateuploadsequence; sid:1003267; rev:1)
alert tcp any any -> any any (msg:"MMS domainDownload"; appid:mms_domaindownload; sid:1003268; rev:1)
alert tcp any any -> any any (msg:"MMS domainUpload"; appid:mms_domainupload; sid:1003269; rev:1)
alert tcp any any -> any any (msg:"MMS loadDomainContent"; appid:mms_loaddomaincontent; sid:1003270; rev:1)
alert tcp any any -> any any (msg:"MMS storeDomainContent"; appid:mms_storedomaincontent; sid:1003271; rev:1)
alert tcp any any -> any any (msg:"MMS deleteDomain"; appid:mms_deletedomain; sid:1003272; rev:1)
alert tcp any any -> any any (msg:"MMS getDomainAttributes"; appid:mms_getdomainattributes; sid:1003273; rev:1)
alert tcp any any -> any any (msg:"MMS createProgramInvocation"; appid:mms_createprograminvocation; sid:1003274; rev:1)
alert tcp any any -> any any (msg:"MMS deleteProgramInvocation"; appid:mms_deleteprograminvocation; sid:1003275; rev:1)
alert tcp any any -> any any (msg:"MMS start"; appid:mms_start; sid:1003276; rev:1)
alert tcp any any -> any any (msg:"MMS stop"; appid:mms_stop; sid:1003277; rev:1)
alert tcp any any -> any any (msg:"MMS resume"; appid:mms_resume; sid:1003278; rev:1)
alert tcp any any -> any any (msg:"MMS reset"; appid:mms_reset; sid:1003279; rev:1)
alert tcp any any -> any any (msg:"MMS kill"; appid:mms_kill; sid:1003280; rev:1)
alert tcp any any -> any any (msg:"MMS getProgramInvocationAttr"; appid:mms_getprograminvocationattr; sid:1003281; rev:1)
alert tcp any any -> any any (msg:"MMS obtainFile"; appid:mms_obtainfile; sid:1003282; rev:1)
alert tcp any any -> any any (msg:"MMS defineEventCondition"; appid:mms_defineeventcondition; sid:1003283; rev:1)
alert tcp any any -> any any (msg:"MMS deleteEventCondition"; appid:mms_deleteeventcondition; sid:1003284; rev:1)
alert tcp any any -> any any (msg:"MMS getEventConditionAttr"; appid:mms_geteventconditionattr; sid:1003285; rev:1)
alert tcp any any -> any any (msg:"MMS reportEventConditionStatus"; appid:mms_reporteventconditionstatus; sid:1003286; rev:1)
alert tcp any any -> any any (msg:"MMS alterEventConditionMonitoring"; appid:mms_altereventconditionmonitoring; sid:1003287; rev:1)
alert tcp any any -> any any (msg:"MMS triggerEvent"; appid:mms_triggerevent; sid:1003288; rev:1)
alert tcp any any -> any any (msg:"MMS defineEventAction"; appid:mms_defineeventaction; sid:1003289; rev:1)
alert tcp any any -> any any (msg:"MMS deleteEventAction"; appid:mms_deleteeventaction; sid:1003290; rev:1)
alert tcp any any -> any any (msg:"MMS getEventActionAttr"; appid:mms_geteventactionattr; sid:1003291; rev:1)
alert tcp any any -> any any (msg:"MMS reportEventActionStatus"; appid:mms_reporteventactionstatus; sid:1003292; rev:1)
alert tcp any any -> any any (msg:"MMS defineEventEnrollment"; appid:mms_defineeventenrollment; sid:1003293; rev:1)
alert tcp any any -> any any (msg:"MMS deleteEventEnrollment"; appid:mms_deleteeventenrollment; sid:1003294; rev:1)
alert tcp any any -> any any (msg:"MMS alterEventEnrollment"; appid:mms_altereventenrollment; sid:1003295; rev:1)
alert tcp any any -> any any (msg:"MMS reportEventEnrollmentStatus"; appid:mms_reporteventenrollmentstatus; sid:1003296; rev:1)
alert tcp any any -> any any (msg:"MMS getEventEnrollmentAttr"; appid:mms_geteventenrollmentattr; sid:1003297; rev:1)
alert tcp any any -> any any (msg:"MMS ackEventNotificaton"; appid:mms_ackeventnotificaton; sid:1003298; rev:1)
alert tcp any any -> any any (msg:"MMS getAlarmSummary"; appid:mms_getalarmsummary; sid:1003299; rev:1)
alert tcp any any -> any any (msg:"MMS getAlarmEnrollmentSummary"; appid:mms_getalarmenrollmentsummary; sid:1003300; rev:1)
alert tcp any any -> any any (msg:"MMS readJournal"; appid:mms_readjournal; sid:1003301; rev:1)
alert tcp any any -> any any (msg:"MMS writeJournal"; appid:mms_writejournal; sid:1003302; rev:1)
alert tcp any any -> any any (msg:"MMS initializeJournal"; appid:mms_initializejournal; sid:1003303; rev:1)
alert tcp any any -> any any (msg:"MMS reportJournalStatus"; appid:mms_reportjournalstatus; sid:1003304; rev:1)
alert tcp any any -> any any (msg:"MMS createJournal"; appid:mms_createjournal; sid:1003305; rev:1)
alert tcp any any -> any any (msg:"MMS deleteJournal"; appid:mms_deletejournal; sid:1003306; rev:1)
alert tcp any any -> any any (msg:"MMS getCapabilityList"; appid:mms_getcapabilitylist; sid:1003307; rev:1)
alert tcp any any -> any any (msg:"MMS fileOpen"; appid:mms_fileopen; sid:1003308; rev:1)
alert tcp any any -> any any (msg:"MMS fileRead"; appid:mms_fileread; sid:1003309; rev:1)
alert tcp any any -> any any (msg:"MMS fileClose"; appid:mms_fileclose; sid:1003310; rev:1)
alert tcp any any -> any any (msg:"MMS fileRename"; appid:mms_filerename; sid:1003311; rev:1)
alert tcp any any -> any any (msg:"MMS fileDelete"; appid:mms_filedelete; sid:1003312; rev:1)
alert tcp any any -> any any (msg:"MMS fileDirectory"; appid:mms_filedirectory; sid:1003313; rev:1)
alert tcp any any -> any any (msg:"DLMS-COSEM"; appid:dlms-cosem; sid:1003314; rev:1)
alert tcp any any -> any any (msg:"DLMS-COSEM Get Response"; appid:dlms-cosem_get_response; sid:1003315; rev:1)
alert tcp any any -> any any (msg:"DLMS-COSEM Set Response"; appid:dlms-cosem_set_response; sid:1003316; rev:1)
alert tcp any any -> any any (msg:"DLMS-COSEM Get Request"; appid:dlms-cosem_get_request; sid:1003317; rev:1)
alert tcp any any -> any any (msg:"DLMS-COSEM Set Request"; appid:dlms-cosem_set_request; sid:1003318; rev:1)
alert tcp any any -> any any (msg:"DLMS-COSEM Initiate Response"; appid:dlms-cosem_initiate_response; sid:1003319; rev:1)
alert tcp any any -> any any (msg:"DLMS-COSEM Initiate Request No Authentication"; appid:dlms-cosem_initiate_request_no_authentication; sid:1003320; rev:1)
alert tcp any any -> any any (msg:"DLMS-COSEM Initiate Request Low-Level Authentication"; appid:dlms-cosem_initiate_request_low-level_authentication; sid:1003321; rev:1)
alert tcp any any -> any any (msg:"DLMS-COSEM Initiate Request High-Level Authentication"; appid:dlms-cosem_initiate_request_high-level_authentication; sid:1003322; rev:1)
alert tcp any any -> any any (msg:"IEEE C37.118 Synchrophasor"; appid:ieee-c37118; sid:1003323; rev:1)
alert tcp any any -> any any (msg:"IEEE C37.118 Header Frame"; appid:ieee_c37.118_header_frame; sid:1003324; rev:1)
alert tcp any any -> any any (msg:"IEEE C37.118 Data Frame"; appid:ieee_c37.118_data_frame; sid:1003325; rev:1)
alert tcp any any -> any any (msg:"IEEE C37.118 Configuration Frame 1"; appid:ieee_c37.118_configuration_frame_1; sid:1003326; rev:1)
alert tcp any any -> any any (msg:"IEEE C37.118 Configuration Frame 2"; appid:ieee_c37.118_configuration_frame_2; sid:1003327; rev:1)
alert tcp any any -> any any (msg:"IEEE C37.118 Configuration Frame 3"; appid:ieee_c37.118_configuration_frame_3; sid:1003328; rev:1)
alert tcp any any -> any any (msg:"IEEE C37.118 Command Extended Frame"; appid:ieee_c37.118_command_extended_frame; sid:1003329; rev:1)
alert tcp any any -> any any (msg:"IEEE C37.118 Command DT On Frame"; appid:ieee_c37.118_command_dt_on_frame; sid:1003330; rev:1)
alert tcp any any -> any any (msg:"IEEE C37.118 Command Send Header Frame"; appid:ieee_c37.118_command_send_header_frame; sid:1003331; rev:1)
alert tcp any any -> any any (msg:"IEEE C37.118 Command DT Off Frame"; appid:ieee_c37.118_command_dt_off_frame; sid:1003332; rev:1)
alert tcp any any -> any any (msg:"IEEE C37.118 Command Send Configuration 2 Frame"; appid:ieee_c37.118_command_send_configuration_2_frame; sid:1003333; rev:1)
alert tcp any any -> any any (msg:"IEEE C37.118 Command Send Configuration 3 Frame"; appid:ieee_c37.118_command_send_configuration_3_frame; sid:1003334; rev:1)
alert tcp any any -> any any (msg:"IEEE C37.118 Command Send Configuration 1 Frame"; appid:ieee_c37.118_command_send_configuration_1_frame; sid:1003335; rev:1)
alert tcp any any -> any any (msg:"Postman"; appid:postman; sid:1003336; rev:1)
alert tcp any any -> any any (msg:"DeepL Translator"; appid:deepl_translator; sid:1003337; rev:1)
alert tcp any any -> any any (msg:"Notion"; appid:notion; sid:1003338; rev:1)
alert tcp any any -> any any (msg:"Grafana"; appid:grafana; sid:1003339; rev:1)
alert tcp any any -> any any (msg:"Jabra"; appid:jabra; sid:1003340; rev:1)
alert tcp any any -> any any (msg:"Termius"; appid:termius; sid:1003341; rev:1)
alert tcp any any -> any any (msg:"BoxCryptor"; appid:boxcryptor; sid:1003342; rev:1)
alert tcp any any -> any any (msg:"Wrike"; appid:wrike; sid:1003343; rev:1)
alert tcp any any -> any any (msg:"Calendly"; appid:calendly; sid:1003344; rev:1)
alert tcp any any -> any any (msg:"Tabnine"; appid:tabnine; sid:1003345; rev:1)
alert tcp any any -> any any (msg:"1Password"; appid:1password; sid:1003346; rev:1)
alert tcp any any -> any any (msg:"Hop-by-Hop IPv6 Extension Header"; appid:hop-by-hop_ipv6_extension_header; sid:1003347; rev:1)
alert tcp any any -> any any (msg:"IPv6 Routing Header"; appid:ipv6_routing_header; sid:1003348; rev:1)
alert tcp any any -> any any (msg:"IPv6 Frag Header"; appid:ipv6_frag_header; sid:1003349; rev:1)
alert tcp any any -> any any (msg:"IPv6 No Next Header"; appid:ipv6_no_next_header; sid:1003350; rev:1)
alert tcp any any -> any any (msg:"IPv6 Destination Options"; appid:ipv6_destination_options; sid:1003351; rev:1)
alert tcp any any -> any any (msg:"Tivoli Object Dispatcher"; appid:tivoli_object_dispatcher; sid:1003352; rev:1)
alert tcp any any -> any any (msg:"CoAP"; appid:coap; sid:1003353; rev:1)
alert tcp any any -> any any (msg:"Tradestation"; appid:tradestation; sid:1003354; rev:1)
alert tcp any any -> any any (msg:"DMP"; appid:dmp; sid:1003355; rev:1)
alert tcp any any -> any any (msg:"Pearson"; appid:pearson; sid:1003356; rev:1)
alert tcp any any -> any any (msg:"Pearson VUE"; appid:pearson_vue; sid:1003357; rev:1)
alert tcp any any -> any any (msg:"Pearson Online Academy"; appid:pearson_online_academy; sid:1003358; rev:1)
alert tcp any any -> any any (msg:"Savvas"; appid:savvas; sid:1003359; rev:1)
alert tcp any any -> any any (msg:"Fandom"; appid:fandom; sid:1003360; rev:1)
alert tcp any any -> any any (msg:"Keap"; appid:keap; sid:1003361; rev:1)
alert tcp any any -> any any (msg:"Forcepoint"; appid:forcepoint; sid:1003362; rev:1)
alert tcp any any -> any any (msg:"Visa.com"; appid:visa.com; sid:1003363; rev:1)
alert tcp any any -> any any (msg:"Zoho CRM"; appid:zoho_crm; sid:1003364; rev:1)
alert tcp any any -> any any (msg:"S7CommPlus"; appid:s7commplus; sid:1003365; rev:1)
alert tcp any any -> any any (msg:"ChatGPT"; appid:chatgpt; sid:1003366; rev:1)
alert tcp any any -> any any (msg:"CompTIA"; appid:comptia; sid:1003367; rev:1)
alert tcp any any -> any any (msg:"OpenAI"; appid:openai; sid:1003368; rev:1)
alert tcp any any -> any any (msg:"DallE"; appid:dalle; sid:1003369; rev:1)
alert tcp any any -> any any (msg:"Ola Cabs"; appid:ola_cabs; sid:1003370; rev:1)
alert tcp any any -> any any (msg:"iCloud Mail"; appid:icloud_mail; sid:1003371; rev:1)