.N NetProwler_SU18 #Policy Name .L 2 #Policy structure .D Detects NetProwler SNMP traps for NP signatures found in SU 18 #Policy Description .V 1024942467 #Policy revision number .Z 20000 #Policy ID .Z 20000 #Policy ID .R Apache_Chunk_Encoding_BO #Rule Definition ..D Detects attempts to exploit a chunk-encoding vulnerability in some versions of Apache Web Server. #Rule Description ..Z 20001 #Rule ID ..V 90 #Rule Value ..S #Select Clause(s) ...G System Message #System Message ....T *NetProwler*Apache_Chunk_Encoding_BO* #Regular text ....Z 20002 #ID of the clause ..A #Action Clause(s) ...E Record to Event Viewer #Record Event ....Z 20003 #ID of the clause .R Bind_Version_Query #Rule Definition ..D Detects DNS query for Berkley Internet Name Domain (BIND) versions. This could be a precursor to an attack against vulnerable DNS servers. #Rule Description ..Z 20004 #Rule ID ..V 90 #Rule Value ..S #Select Clause(s) ...G System Message #System Message ....T *NetProwler*Bind_Version_Query* #Regular text ....Z 20005 #ID of the clause ..A #Action Clause(s) ...E Record to Event Viewer #Record Event ....Z 20006 #ID of the clause