alert syslog $EXTERNAL_NET any -> $HOME_NET any (msg: "[SYSLOG] Kernel log daemon terminating"; content: "kernel log daemon terminating"; nocase; classtype: program-error; reference: url,wiki.quadrantsec.com/bin/view/Main/5000126; sid: 5000126; facility: kern; rev:1;)
-- Main.Sagan-Wiki-Add - 2015-10-21
New revisions of 5000126 will be below...