Snort Rules- For the rules in this section, determine the type of rule, the Sort config location where you would find the rule (/etcsm/rules, threshold.conf, etc), and describe what the rule does. 1) alert tcp SEXTERNAL_NET any->SSQL_SERVERS 1433 (ms:SOLSA BFL"; content:"[02]"; content:"sal":depth:2,offset:39;nocase;reference:bugtraq,4797; reference:nessus,10673;sid:3542;rev:7;) 2) alert tcp SHOME_NET any->SEXTERNAL NET 5222 (sGPL CHATMISC Traffic"; flow:to server established; content:"SHTTP_SERVERS SHTTP_PORTS (ms flow:to server established: content:"User-Agent|3al salmap"; fast pattern:only, http header; detection filter:track by dst,count 4, seconds 20; reference : url,sglmap.sourceforege.netsid:2008538; rev:8; Snort Rules- For the rules in this section, determine the type of rule, the Sort config location where you would find the rule (/etcsm/rules, threshold.conf, etc), and describe what the rule does. 1) alert tcp SEXTERNAL_NET any->SSQL_SERVERS 1433 (ms:SOLSA BFL"; content:"[02]"; content:"sal":depth:2,offset:39;nocase;reference:bugtraq,4797; reference:nessus,10673;sid:3542;rev:7;) 2) alert tcp SHOME_NET any->SEXTERNAL NET 5222 (sGPL CHATMISC Traffic"; flow:to server established; content:"SHTTP_SERVERS SHTTP_PORTS (ms flow:to server established: content:"User-Agent|3al salmap"; fast pattern:only, http header; detection filter:track by dst,count 4, seconds 20; reference : url,sglmap.sourceforege.netsid:2008538; rev:8