#alert dns any any -> any 53 (msg:"OPN_File_Transfer - 4shared - DNS request for 4shared.com"; dns_query; content:"4shared.com"; nocase; classtype:file-transfer; sid:53000000;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - 4shared - Related URL (4shared.com)"; content:"4shared.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000001; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - 4shared - Related TLS SNI (4shared.com)"; tls_sni; content:"4shared.com";flow:to_server,established; classtype:file-transfer; sid:53000002; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Bigupload - DNS request for bigupload.com"; dns_query; content:"bigupload.com"; nocase; classtype:file-transfer; sid:53000003;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Bigupload - Related URL (bigupload.com)"; content:"bigupload.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000004; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Bigupload - Related TLS SNI (bigupload.com)"; tls_sni; content:"bigupload.com";flow:to_server,established; classtype:file-transfer; sid:53000005; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Bigupload - DNS request for bigupload.net"; dns_query; content:"bigupload.net"; nocase; classtype:file-transfer; sid:53000006;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Bigupload - Related URL (bigupload.net)"; content:"bigupload.net"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000007; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Bigupload - Related TLS SNI (bigupload.net)"; tls_sni; content:"bigupload.net";flow:to_server,established; classtype:file-transfer; sid:53000008; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Box.net - DNS request for box.net"; dns_query; content:"box.net"; nocase; classtype:file-transfer; sid:53000009;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Box.net - Related URL (box.net)"; content:"box.net"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000010; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Box.net - Related TLS SNI (box.net)"; tls_sni; content:"box.net";flow:to_server,established; classtype:file-transfer; sid:53000011; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Clubbox - DNS request for clubbox.co.kr"; dns_query; content:"clubbox.co.kr"; nocase; classtype:file-transfer; sid:53000012;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Clubbox - Related URL (clubbox.co.kr)"; content:"clubbox.co.kr"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000013; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Clubbox - Related TLS SNI (clubbox.co.kr)"; tls_sni; content:"clubbox.co.kr";flow:to_server,established; classtype:file-transfer; sid:53000014; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Datei.to - DNS request for datei.to"; dns_query; content:"datei.to"; nocase; classtype:file-transfer; sid:53000015;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Datei.to - Related URL (datei.to)"; content:"datei.to"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000016; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Datei.to - Related TLS SNI (datei.to)"; tls_sni; content:"datei.to";flow:to_server,established; classtype:file-transfer; sid:53000017; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Depositfiles - DNS request for depositfiles.com"; dns_query; content:"depositfiles.com"; nocase; classtype:file-transfer; sid:53000018;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Depositfiles - Related URL (depositfiles.com)"; content:"depositfiles.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000019; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Depositfiles - Related TLS SNI (depositfiles.com)"; tls_sni; content:"depositfiles.com";flow:to_server,established; classtype:file-transfer; sid:53000020; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Divshare - DNS request for divshare.com"; dns_query; content:"divshare.com"; nocase; classtype:file-transfer; sid:53000021;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Divshare - Related URL (divshare.com)"; content:"divshare.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000022; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Divshare - Related TLS SNI (divshare.com)"; tls_sni; content:"divshare.com";flow:to_server,established; classtype:file-transfer; sid:53000023; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Dropbox - DNS request for dropboxusercontent.com"; dns_query; content:"dropboxusercontent.com"; nocase; classtype:file-transfer; sid:53000024;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Dropbox - Related URL (dropboxusercontent.com)"; content:"dropboxusercontent.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000025; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Dropbox - Related TLS SNI (dropboxusercontent.com)"; tls_sni; content:"dropboxusercontent.com";flow:to_server,established; classtype:file-transfer; sid:53000026; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Dropbox - DNS request for dropbox.com"; dns_query; content:"dropbox.com"; nocase; classtype:file-transfer; sid:53000027;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Dropbox - Related URL (dropbox.com)"; content:"dropbox.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000028; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Dropbox - Related TLS SNI (dropbox.com)"; tls_sni; content:"dropbox.com";flow:to_server,established; classtype:file-transfer; sid:53000029; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Dropbox - DNS request for dropboxapi.com"; dns_query; content:"dropboxapi.com"; nocase; classtype:file-transfer; sid:53000030;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Dropbox - Related URL (dropboxapi.com)"; content:"dropboxapi.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000031; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Dropbox - Related TLS SNI (dropboxapi.com)"; tls_sni; content:"dropboxapi.com";flow:to_server,established; classtype:file-transfer; sid:53000032; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Extratorrent - DNS request for extratorrent.cc"; dns_query; content:"extratorrent.cc"; nocase; classtype:file-transfer; sid:53000033;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Extratorrent - Related URL (extratorrent.cc)"; content:"extratorrent.cc"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000034; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Extratorrent - Related TLS SNI (extratorrent.cc)"; tls_sni; content:"extratorrent.cc";flow:to_server,established; classtype:file-transfer; sid:53000035; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Filer.cx - DNS request for filer.cx"; dns_query; content:"filer.cx"; nocase; classtype:file-transfer; sid:53000036;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Filer.cx - Related URL (filer.cx)"; content:"filer.cx"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000037; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Filer.cx - Related TLS SNI (filer.cx)"; tls_sni; content:"filer.cx";flow:to_server,established; classtype:file-transfer; sid:53000038; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Filesonic - DNS request for filesonic.com"; dns_query; content:"filesonic.com"; nocase; classtype:file-transfer; sid:53000039;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Filesonic - Related URL (filesonic.com)"; content:"filesonic.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000040; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Filesonic - Related TLS SNI (filesonic.com)"; tls_sni; content:"filesonic.com";flow:to_server,established; classtype:file-transfer; sid:53000041; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Hotfile - DNS request for hotfile.com"; dns_query; content:"hotfile.com"; nocase; classtype:file-transfer; sid:53000042;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Hotfile - Related URL (hotfile.com)"; content:"hotfile.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000043; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Hotfile - Related TLS SNI (hotfile.com)"; tls_sni; content:"hotfile.com";flow:to_server,established; classtype:file-transfer; sid:53000044; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - ifile.it - DNS request for ifile.it"; dns_query; content:"ifile.it"; nocase; classtype:file-transfer; sid:53000045;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - ifile.it - Related URL (ifile.it)"; content:"ifile.it"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000046; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - ifile.it - Related TLS SNI (ifile.it)"; tls_sni; content:"ifile.it";flow:to_server,established; classtype:file-transfer; sid:53000047; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Kickasstorrents - DNS request for kickass.to"; dns_query; content:"kickass.to"; nocase; classtype:file-transfer; sid:53000048;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Kickasstorrents - Related URL (kickass.to)"; content:"kickass.to"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000049; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Kickasstorrents - Related TLS SNI (kickass.to)"; tls_sni; content:"kickass.to";flow:to_server,established; classtype:file-transfer; sid:53000050; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Kickasstorrents - DNS request for kickasstorrents.eu"; dns_query; content:"kickasstorrents.eu"; nocase; classtype:file-transfer; sid:53000051;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Kickasstorrents - Related URL (kickasstorrents.eu)"; content:"kickasstorrents.eu"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000052; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Kickasstorrents - Related TLS SNI (kickasstorrents.eu)"; tls_sni; content:"kickasstorrents.eu";flow:to_server,established; classtype:file-transfer; sid:53000053; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Kickasstorrents - DNS request for kickass.so"; dns_query; content:"kickass.so"; nocase; classtype:file-transfer; sid:53000054;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Kickasstorrents - Related URL (kickass.so)"; content:"kickass.so"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000055; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Kickasstorrents - Related TLS SNI (kickass.so)"; tls_sni; content:"kickass.so";flow:to_server,established; classtype:file-transfer; sid:53000056; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Kickasstorrents - DNS request for kickass.cr"; dns_query; content:"kickass.cr"; nocase; classtype:file-transfer; sid:53000057;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Kickasstorrents - Related URL (kickass.cr)"; content:"kickass.cr"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000058; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Kickasstorrents - Related TLS SNI (kickass.cr)"; tls_sni; content:"kickass.cr";flow:to_server,established; classtype:file-transfer; sid:53000059; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Kickasstorrents - DNS request for kickasstorrents.to"; dns_query; content:"kickasstorrents.to"; nocase; classtype:file-transfer; sid:53000060;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Kickasstorrents - Related URL (kickasstorrents.to)"; content:"kickasstorrents.to"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000061; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Kickasstorrents - Related TLS SNI (kickasstorrents.to)"; tls_sni; content:"kickasstorrents.to";flow:to_server,established; classtype:file-transfer; sid:53000062; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Kickasstorrents - DNS request for kickass.cd"; dns_query; content:"kickass.cd"; nocase; classtype:file-transfer; sid:53000063;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Kickasstorrents - Related URL (kickass.cd)"; content:"kickass.cd"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000064; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Kickasstorrents - Related TLS SNI (kickass.cd)"; tls_sni; content:"kickass.cd";flow:to_server,established; classtype:file-transfer; sid:53000065; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Kickasstorrents - DNS request for kickass.mx"; dns_query; content:"kickass.mx"; nocase; classtype:file-transfer; sid:53000066;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Kickasstorrents - Related URL (kickass.mx)"; content:"kickass.mx"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000067; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Kickasstorrents - Related TLS SNI (kickass.mx)"; tls_sni; content:"kickass.mx";flow:to_server,established; classtype:file-transfer; sid:53000068; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Kickasstorrents - DNS request for kickass.la"; dns_query; content:"kickass.la"; nocase; classtype:file-transfer; sid:53000069;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Kickasstorrents - Related URL (kickass.la)"; content:"kickass.la"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000070; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Kickasstorrents - Related TLS SNI (kickass.la)"; tls_sni; content:"kickass.la";flow:to_server,established; classtype:file-transfer; sid:53000071; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Mediafire - DNS request for mediafire.com"; dns_query; content:"mediafire.com"; nocase; classtype:file-transfer; sid:53000072;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Mediafire - Related URL (mediafire.com)"; content:"mediafire.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000073; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Mediafire - Related TLS SNI (mediafire.com)"; tls_sni; content:"mediafire.com";flow:to_server,established; classtype:file-transfer; sid:53000074; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Mega - DNS request for mega.nz"; dns_query; content:"mega.nz"; nocase; classtype:file-transfer; sid:53000075;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Mega - Related URL (mega.nz)"; content:"mega.nz"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000076; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Mega - Related TLS SNI (mega.nz)"; tls_sni; content:"mega.nz";flow:to_server,established; classtype:file-transfer; sid:53000077; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Mega - DNS request for mega.co.nz"; dns_query; content:"mega.co.nz"; nocase; classtype:file-transfer; sid:53000078;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Mega - Related URL (mega.co.nz)"; content:"mega.co.nz"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000079; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Mega - Related TLS SNI (mega.co.nz)"; tls_sni; content:"mega.co.nz";flow:to_server,established; classtype:file-transfer; sid:53000080; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Mega - DNS request for megaupload.com"; dns_query; content:"megaupload.com"; nocase; classtype:file-transfer; sid:53000081;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Mega - Related URL (megaupload.com)"; content:"megaupload.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000082; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Mega - Related TLS SNI (megaupload.com)"; tls_sni; content:"megaupload.com";flow:to_server,established; classtype:file-transfer; sid:53000083; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Mega - DNS request for megaproxy.com"; dns_query; content:"megaproxy.com"; nocase; classtype:file-transfer; sid:53000084;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Mega - Related URL (megaproxy.com)"; content:"megaproxy.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000085; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Mega - Related TLS SNI (megaproxy.com)"; tls_sni; content:"megaproxy.com";flow:to_server,established; classtype:file-transfer; sid:53000086; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Mega - DNS request for megashare.com"; dns_query; content:"megashare.com"; nocase; classtype:file-transfer; sid:53000087;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Mega - Related URL (megashare.com)"; content:"megashare.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000088; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Mega - Related TLS SNI (megashare.com)"; tls_sni; content:"megashare.com";flow:to_server,established; classtype:file-transfer; sid:53000089; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Mega - DNS request for megavideo.com"; dns_query; content:"megavideo.com"; nocase; classtype:file-transfer; sid:53000090;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Mega - Related URL (megavideo.com)"; content:"megavideo.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000091; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Mega - Related TLS SNI (megavideo.com)"; tls_sni; content:"megavideo.com";flow:to_server,established; classtype:file-transfer; sid:53000092; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Oboom - DNS request for oboom-premium.com"; dns_query; content:"oboom-premium.com"; nocase; classtype:file-transfer; sid:53000093;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Oboom - Related URL (oboom-premium.com)"; content:"oboom-premium.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000094; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Oboom - Related TLS SNI (oboom-premium.com)"; tls_sni; content:"oboom-premium.com";flow:to_server,established; classtype:file-transfer; sid:53000095; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Rutracker - DNS request for rutracker.org"; dns_query; content:"rutracker.org"; nocase; classtype:file-transfer; sid:53000096;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Rutracker - Related URL (rutracker.org)"; content:"rutracker.org"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000097; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Rutracker - Related TLS SNI (rutracker.org)"; tls_sni; content:"rutracker.org";flow:to_server,established; classtype:file-transfer; sid:53000098; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - SkyDrive - DNS request for skydrive.live.com"; dns_query; content:"skydrive.live.com"; nocase; classtype:file-transfer; sid:53000099;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - SkyDrive - Related URL (skydrive.live.com)"; content:"skydrive.live.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000100; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - SkyDrive - Related TLS SNI (skydrive.live.com)"; tls_sni; content:"skydrive.live.com";flow:to_server,established; classtype:file-transfer; sid:53000101; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Torrentz.eu - DNS request for torrentz.eu"; dns_query; content:"torrentz.eu"; nocase; classtype:file-transfer; sid:53000102;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Torrentz.eu - Related URL (torrentz.eu)"; content:"torrentz.eu"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000103; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Torrentz.eu - Related TLS SNI (torrentz.eu)"; tls_sni; content:"torrentz.eu";flow:to_server,established; classtype:file-transfer; sid:53000104; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Uploaded - DNS request for uploaded.net"; dns_query; content:"uploaded.net"; nocase; classtype:file-transfer; sid:53000105;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Uploaded - Related URL (uploaded.net)"; content:"uploaded.net"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000106; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Uploaded - Related TLS SNI (uploaded.net)"; tls_sni; content:"uploaded.net";flow:to_server,established; classtype:file-transfer; sid:53000107; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - WeTransfer - DNS request for wetransfer.com"; dns_query; content:"wetransfer.com"; nocase; classtype:file-transfer; sid:53000108;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - WeTransfer - Related URL (wetransfer.com)"; content:"wetransfer.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000109; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - WeTransfer - Related TLS SNI (wetransfer.com)"; tls_sni; content:"wetransfer.com";flow:to_server,established; classtype:file-transfer; sid:53000110; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Xunlei - DNS request for xunlei.com"; dns_query; content:"xunlei.com"; nocase; classtype:file-transfer; sid:53000111;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Xunlei - Related URL (xunlei.com)"; content:"xunlei.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000112; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Xunlei - Related TLS SNI (xunlei.com)"; tls_sni; content:"xunlei.com";flow:to_server,established; classtype:file-transfer; sid:53000113; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_File_Transfer - Zippyshare - DNS request for zippyshare.com"; dns_query; content:"zippyshare.com"; nocase; classtype:file-transfer; sid:53000114;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_File_Transfer - Zippyshare - Related URL (zippyshare.com)"; content:"zippyshare.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000115; rev:1;)
#alert tls any any -> any any (msg:"OPN_File_Transfer - Zippyshare - Related TLS SNI (zippyshare.com)"; tls_sni; content:"zippyshare.com";flow:to_server,established; classtype:file-transfer; sid:53000116; rev:1;)
#alert dns $HOME_NET any -> any 53 (msg:"OPN_File_Transfer - Share-Online - DNS request for share-online.biz"; dns_query; content:"share-online.biz"; nocase; classtype:file-transfer; sid:53000117;)
#alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_File_Transfer - Share-Online - Related URL (share-online.biz)"; content:"share-online.biz"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000118; rev:1;)
#alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_File_Transfer - Share-Online - Related TLS SNI (share-online.biz)"; tls_sni; content:"share-online.biz";flow:to_server,established; classtype:file-transfer; sid:53000119; rev:1;)
#alert dns $HOME_NET any -> any 53 (msg:"OPN_File_Transfer - load.to - DNS request for load.to"; dns_query; content:"load.to"; nocase;classtype:file-transfer; sid:53000120;)
#alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_File_Transfer - load.to - Related URL (load.to)"; content:"load.to"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000121; rev:1;)
#alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_File_Transfer - load.to - Related TLS SNI (load.to)"; tls_sni; content:"load.to";flow:to_server,established; classtype:file-transfer; sid:53000122; rev:1;)
#alert dns $HOME_NET any -> any 53 (msg:"OPN_File_Transfer - anonfile - DNS request for anonfile.com"; dns_query; content:"anonfile.com"; nocase; classtype:file-transfer; sid:53000123;)
#alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_File_Transfer - anonfile - Related URL (anonfile.com)"; content:"anonfile.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000124; rev:1;)
#alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_File_Transfer - anonfile - Related TLS SNI (anonfile.com)"; tls_sni; content:"anonfile.com";flow:to_server,established; classtype:file-transfer; sid:53000125; rev:1;)
#alert dns $HOME_NET any -> any 53 (msg:"OPN_File_Transfer - rapidgator - DNS request for rapidgator.net"; dns_query; content:"rapidgator.net"; nocase; classtype:file-transfer; sid:53000126;)
#alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_File_Transfer - rapidgator - Related URL (rapidgator.net)"; content:"rapidgator.net"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000127; rev:1;)
#alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_File_Transfer - rapidgator - Related TLS SNI (rapidgator.net)"; tls_sni; content:"rapidgator.net";flow:to_server,established; classtype:file-transfer; sid:53000128; rev:1;)
#alert dns $HOME_NET any -> any 53 (msg:"OPN_File_Transfer - filefactory - DNS request for filefactory.com"; dns_query; content:"filefactory.com"; nocase; classtype:file-transfer; sid:53000129;)
#alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_File_Transfer - filefactory - Related URL (filefactory.com)"; content:"filefactory.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000130; rev:1;)
#alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_File_Transfer - filefactory - Related TLS SNI (filefactory.com)"; tls_sni; content:"filefactory.com";flow:to_server,established; classtype:file-transfer; sid:53000131; rev:1;)
#alert dns $HOME_NET any -> any 53 (msg:"OPN_File_Transfer - turbobit - DNS request for turbobit.net"; dns_query; content:"turbobit.net"; nocase; classtype:file-transfer; sid:53000132;)
#alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_File_Transfer - turbobit - Related URL (turbobit.net)"; content:"turbobit.net"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000133; rev:1;)
#alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_File_Transfer - turbobit - Related TLS SNI (turbobit.net)"; tls_sni; content:"turbobit.net";flow:to_server,established; classtype:file-transfer; sid:53000134; rev:1;)
#alert dns $HOME_NET any -> any 53 (msg:"OPN_File_Transfer - 1fichier - DNS request for 1fichier.com"; dns_query; content:"1fichier.com"; nocase; classtype:file-transfer; sid:53000135;)
#alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_File_Transfer - 1fichier - Related URL (1fichier.com)"; content:"1fichier.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000136; rev:1;)
#alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_File_Transfer - 1fichier - Related TLS SNI (1fichier.com)"; tls_sni; content:"1fichier.com";flow:to_server,established; classtype:file-transfer; sid:53000137; rev:1;)
#alert dns $HOME_NET any -> any 53 (msg:"OPN_File_Transfer - hugefiles - DNS request for hugefiles.cc"; dns_query; content:"hugefiles.cc"; nocase; classtype:file-transfer; sid:53000138;)
#alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_File_Transfer - hugefiles - Related URL (hugefiles.cc)"; content:"hugefiles.cc"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000139; rev:1;)
#alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_File_Transfer - hugefiles - Related TLS SNI (hugefiles.cc)"; tls_sni; content:"hugefiles.cc";flow:to_server,established; classtype:file-transfer; sid:53000140; rev:1;)
#alert dns $HOME_NET any -> any 53 (msg:"OPN_File_Transfer - 2shared - DNS request for 2shared.com"; dns_query; content:"2shared.com"; nocase; classtype:file-transfer; sid:53000141;)
#alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_File_Transfer - 2shared - Related URL (2shared.com)"; content:"2shared.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000142; rev:1;)
#alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_File_Transfer - 2shared - Related TLS SNI (2shared.com)"; tls_sni; content:"2shared.com";flow:to_server,established; classtype:file-transfer; sid:53000143; rev:1;)
#alert dns $HOME_NET any -> any 53 (msg:"surigen - free.fr - DNS request for dl.free.fr"; dns_query; content:"dl.free.fr"; nocase; classtype:file-transfer; sid:53000144;)
#alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"surigen - free.fr - Related URL (dl.free.fr)"; content:"dl.free.fr"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000145; rev:1;)
#alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"surigen - free.fr - Related TLS SNI (dl.free.fr)"; tls_sni; content:"dl.free.fr";flow:to_server,established; classtype:file-transfer; sid:53000146; rev:1;)
#alert dns $HOME_NET any -> any 53 (msg:"surigen - grosfichier - DNS request for grosfichiers.com"; dns_query; content:"grosfichiers.com"; nocase; classtype:file-transfer; sid:53000147;)
#alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"surigen - grosfichier - Related URL (grosfichiers.com)"; content:"grosfichiers.com"; http_uri; flow:to_server,established; classtype:file-transfer; sid:53000148; rev:1;)
#alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"surigen - grosfichier - Related TLS SNI (grosfichiers.com)"; tls_sni; content:"grosfichiers.com";flow:to_server,established; classtype:file-transfer; sid:53000149; rev:1;)