#alert dns any any -> any 53 (msg:"OPN_Social_Media - Classmates - DNS request for classmates.com"; dns_query; content:"classmates.com"; nocase; classtype:social-media; sid:51000000;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - Classmates - Related URL (classmates.com)"; content:"classmates.com"; http_uri; flow:to_server,established; classtype:social-media; sid:51000001; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - Classmates - Related TLS SNI (classmates.com)"; tls_sni; content:"classmates.com";flow:to_server,established; classtype:social-media; sid:51000002; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_Social_Media - Facebook - DNS request for facebook.com"; dns_query; content:"facebook.com"; nocase; classtype:social-media; sid:51000003;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - Facebook - Related URL (facebook.com)"; content:"facebook.com"; http_uri; flow:to_server,established; classtype:social-media; sid:51000004; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - Facebook - Related TLS SNI (facebook.com)"; tls_sni; content:"facebook.com";flow:to_server,established; classtype:social-media; sid:51000005; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_Social_Media - Facebook - DNS request for facebook.net"; dns_query; content:"facebook.net"; nocase; classtype:social-media; sid:51000006;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - Facebook - Related URL (facebook.net)"; content:"facebook.net"; http_uri; flow:to_server,established; classtype:social-media; sid:51000007; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - Facebook - Related TLS SNI (facebook.net)"; tls_sni; content:"facebook.net";flow:to_server,established; classtype:social-media; sid:51000008; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_Social_Media - Facebook - DNS request for fbcdn.net"; dns_query; content:"fbcdn.net"; nocase; classtype:social-media; sid:51000009;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - Facebook - Related URL (fbcdn.net)"; content:"fbcdn.net"; http_uri; flow:to_server,established; classtype:social-media; sid:51000010; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - Facebook - Related TLS SNI (fbcdn.net)"; tls_sni; content:"fbcdn.net";flow:to_server,established; classtype:social-media; sid:51000011; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_Social_Media - Foursquare - DNS request for foursquare.com"; dns_query; content:"foursquare.com"; nocase; classtype:social-media; sid:51000012;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - Foursquare - Related URL (foursquare.com)"; content:"foursquare.com"; http_uri; flow:to_server,established; classtype:social-media; sid:51000013; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - Foursquare - Related TLS SNI (foursquare.com)"; tls_sni; content:"foursquare.com";flow:to_server,established; classtype:social-media; sid:51000014; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_Social_Media - Friendster - DNS request for friendster.com"; dns_query; content:"friendster.com"; nocase; classtype:social-media; sid:51000015;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - Friendster - Related URL (friendster.com)"; content:"friendster.com"; http_uri; flow:to_server,established; classtype:social-media; sid:51000016; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - Friendster - Related TLS SNI (friendster.com)"; tls_sni; content:"friendster.com";flow:to_server,established; classtype:social-media; sid:51000017; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_Social_Media - Google_plus - DNS request for plus.google.com"; dns_query; content:"plus.google.com"; nocase; classtype:social-media; sid:51000018;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - Google_plus - Related URL (plus.google.com)"; content:"plus.google.com"; http_uri; flow:to_server,established; classtype:social-media; sid:51000019; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - Google_plus - Related TLS SNI (plus.google.com)"; tls_sni; content:"plus.google.com";flow:to_server,established; classtype:social-media; sid:51000020; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_Social_Media - Instagram - DNS request for instagram.com"; dns_query; content:"instagram.com"; nocase; classtype:social-media; sid:51000021;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - Instagram - Related URL (instagram.com)"; content:"instagram.com"; http_uri; flow:to_server,established; classtype:social-media; sid:51000022; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - Instagram - Related TLS SNI (instagram.com)"; tls_sni; content:"instagram.com";flow:to_server,established; classtype:social-media; sid:51000023; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_Social_Media - LinkedIn - DNS request for linkedin.com"; dns_query; content:"linkedin.com"; nocase; classtype:social-media; sid:51000024;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - LinkedIn - Related URL (linkedin.com)"; content:"linkedin.com"; http_uri; flow:to_server,established; classtype:social-media; sid:51000025; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - LinkedIn - Related TLS SNI (linkedin.com)"; tls_sni; content:"linkedin.com";flow:to_server,established; classtype:social-media; sid:51000026; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_Social_Media - match_com - DNS request for match.com"; dns_query; content:"match.com"; nocase; classtype:social-media; sid:51000027;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - match_com - Related URL (match.com)"; content:"match.com"; http_uri; flow:to_server,established; classtype:social-media; sid:51000028; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - match_com - Related TLS SNI (match.com)"; tls_sni; content:"match.com";flow:to_server,established; classtype:social-media; sid:51000029; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_Social_Media - MySpace - DNS request for myspace.com"; dns_query; content:"myspace.com"; nocase; classtype:social-media; sid:51000030;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - MySpace - Related URL (myspace.com)"; content:"myspace.com"; http_uri; flow:to_server,established; classtype:social-media; sid:51000031; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - MySpace - Related TLS SNI (myspace.com)"; tls_sni; content:"myspace.com";flow:to_server,established; classtype:social-media; sid:51000032; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_Social_Media - MySpace - DNS request for myspacecdn.com"; dns_query; content:"myspacecdn.com"; nocase; classtype:social-media; sid:51000033;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - MySpace - Related URL (myspacecdn.com)"; content:"myspacecdn.com"; http_uri; flow:to_server,established; classtype:social-media; sid:51000034; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - MySpace - Related TLS SNI (myspacecdn.com)"; tls_sni; content:"myspacecdn.com";flow:to_server,established; classtype:social-media; sid:51000035; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_Social_Media - Orkut - DNS request for orkut.com"; dns_query; content:"orkut.com"; nocase; classtype:social-media; sid:51000036;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - Orkut - Related URL (orkut.com)"; content:"orkut.com"; http_uri; flow:to_server,established; classtype:social-media; sid:51000037; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - Orkut - Related TLS SNI (orkut.com)"; tls_sni; content:"orkut.com";flow:to_server,established; classtype:social-media; sid:51000038; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_Social_Media - Pinterest - DNS request for pinterest.com"; dns_query; content:"pinterest.com"; nocase; classtype:social-media; sid:51000039;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - Pinterest - Related URL (pinterest.com)"; content:"pinterest.com"; http_uri; flow:to_server,established; classtype:social-media; sid:51000040; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - Pinterest - Related TLS SNI (pinterest.com)"; tls_sni; content:"pinterest.com";flow:to_server,established; classtype:social-media; sid:51000041; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_Social_Media - Reddit - DNS request for reddit.com"; dns_query; content:"reddit.com"; nocase; classtype:social-media; sid:51000042;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - Reddit - Related URL (reddit.com)"; content:"reddit.com"; http_uri; flow:to_server,established; classtype:social-media; sid:51000043; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - Reddit - Related TLS SNI (reddit.com)"; tls_sni; content:"reddit.com";flow:to_server,established; classtype:social-media; sid:51000044; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_Social_Media - Renren - DNS request for renren.com"; dns_query; content:"renren.com"; nocase; classtype:social-media; sid:51000045;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - Renren - Related URL (renren.com)"; content:"renren.com"; http_uri; flow:to_server,established; classtype:social-media; sid:51000046; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - Renren - Related TLS SNI (renren.com)"; tls_sni; content:"renren.com";flow:to_server,established; classtype:social-media; sid:51000047; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_Social_Media - TwitPic - DNS request for twitpic.com"; dns_query; content:"twitpic.com"; nocase; classtype:social-media; sid:51000048;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - TwitPic - Related URL (twitpic.com)"; content:"twitpic.com"; http_uri; flow:to_server,established; classtype:social-media; sid:51000049; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - TwitPic - Related TLS SNI (twitpic.com)"; tls_sni; content:"twitpic.com";flow:to_server,established; classtype:social-media; sid:51000050; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_Social_Media - Twitter - DNS request for twitter.com"; dns_query; content:"twitter.com"; nocase; classtype:social-media; sid:51000051;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - Twitter - Related URL (twitter.com)"; content:"twitter.com"; http_uri; flow:to_server,established; classtype:social-media; sid:51000052; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - Twitter - Related TLS SNI (twitter.com)"; tls_sni; content:"twitter.com";flow:to_server,established; classtype:social-media; sid:51000053; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_Social_Media - VKontakte - DNS request for vkontakte.ru"; dns_query; content:"vkontakte.ru"; nocase; classtype:social-media; sid:51000054;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - VKontakte - Related URL (vkontakte.ru)"; content:"vkontakte.ru"; http_uri; flow:to_server,established; classtype:social-media; sid:51000055; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - VKontakte - Related TLS SNI (vkontakte.ru)"; tls_sni; content:"vkontakte.ru";flow:to_server,established; classtype:social-media; sid:51000056; rev:1;)
#alert dns any any -> any 53 (msg:"OPN_Social_Media - Xing - DNS request for xing.com"; dns_query; content:"xing.com"; nocase; classtype:social-media; sid:51000057;)
#alert http any any -> any $HTTP_PORTS (msg:"OPN_Social_Media - Xing - Related URL (xing.com)"; content:"xing.com"; http_uri; flow:to_server,established; classtype:social-media; sid:51000058; rev:1;)
#alert tls any any -> any any (msg:"OPN_Social_Media - Xing - Related TLS SNI (xing.com)"; tls_sni; content:"xing.com";flow:to_server,established; classtype:social-media; sid:51000059; rev:1;)