alert syslog $EXTERNAL_NET any -> $HOME_NET any (msg: "[KISMET] Possible spoof/broken AP"; program: kismet_server; content: "APSPOOF"; classtype: suspicious-traffic; reference: url, wiki.quadrantsec.com/bin/view/Main/5001022; sid: 5001022; rev: 2;)
-- Main.Sagan-Wiki-Add - 2015-10-21
New revisions of 5001022 will be below...