alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Classmates - DNS request for classmates.com"; dns.query; content:"classmates.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Classmates - Related URL (classmates.com)"; http.uri; content:"classmates.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000001; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Classmates - Related TLS SNI (classmates.com)"; tls.sni; content:"classmates.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000002; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Facebook - DNS request for facebook.com"; dns.query; content:"facebook.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Facebook - Related URL (facebook.com)"; http.uri; content:"facebook.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000004; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Facebook - Related TLS SNI (facebook.com)"; tls.sni; content:"facebook.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000005; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Facebook - DNS request for facebook.net"; dns.query; content:"facebook.net"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Facebook - Related URL (facebook.net)"; http.uri; content:"facebook.net"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000007; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Facebook - Related TLS SNI (facebook.net)"; tls.sni; content:"facebook.net"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000008; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Facebook - DNS request for fbcdn.net"; dns.query; content:"fbcdn.net"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Facebook - Related URL (fbcdn.net)"; http.uri; content:"fbcdn.net"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000010; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Facebook - Related TLS SNI (fbcdn.net)"; tls.sni; content:"fbcdn.net"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000011; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Foursquare - DNS request for foursquare.com"; dns.query; content:"foursquare.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Foursquare - Related URL (foursquare.com)"; http.uri; content:"foursquare.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000013; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Foursquare - Related TLS SNI (foursquare.com)"; tls.sni; content:"foursquare.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000014; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Instagram - DNS request for instagram.com"; dns.query; content:"instagram.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Instagram - Related URL (instagram.com)"; http.uri; content:"instagram.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000016; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Instagram - Related TLS SNI (instagram.com)"; tls.sni; content:"instagram.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000017; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - LinkedIn - DNS request for linkedin.com"; dns.query; content:"linkedin.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - LinkedIn - Related URL (linkedin.com)"; http.uri; content:"linkedin.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000019; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - LinkedIn - Related TLS SNI (linkedin.com)"; tls.sni; content:"linkedin.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000020; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - match_com - DNS request for match.com"; dns.query; content:"match.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - match_com - Related URL (match.com)"; http.uri; content:"match.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000022; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - match_com - Related TLS SNI (match.com)"; tls.sni; content:"match.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000023; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - MySpace - DNS request for myspace.com"; dns.query; content:"myspace.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - MySpace - Related URL (myspace.com)"; http.uri; content:"myspace.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000025; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - MySpace - Related TLS SNI (myspace.com)"; tls.sni; content:"myspace.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000026; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - MySpace - DNS request for myspacecdn.com"; dns.query; content:"myspacecdn.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - MySpace - Related URL (myspacecdn.com)"; http.uri; content:"myspacecdn.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000028; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - MySpace - Related TLS SNI (myspacecdn.com)"; tls.sni; content:"myspacecdn.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000029; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Pinterest - DNS request for pinterest.com"; dns.query; content:"pinterest.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Pinterest - Related URL (pinterest.com)"; http.uri; content:"pinterest.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000031; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Pinterest - Related TLS SNI (pinterest.com)"; tls.sni; content:"pinterest.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000032; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Reddit - DNS request for reddit.com"; dns.query; content:"reddit.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Reddit - Related URL (reddit.com)"; http.uri; content:"reddit.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000034; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Reddit - Related TLS SNI (reddit.com)"; tls.sni; content:"reddit.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000035; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Renren - DNS request for renren.com"; dns.query; content:"renren.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Renren - Related URL (renren.com)"; http.uri; content:"renren.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000037; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Renren - Related TLS SNI (renren.com)"; tls.sni; content:"renren.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000038; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Twitter - DNS request for twitter.com"; dns.query; content:"twitter.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Twitter - Related URL (twitter.com)"; http.uri; content:"twitter.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000040; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Twitter - Related TLS SNI (twitter.com)"; tls.sni; content:"twitter.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000041; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - VKontakte - DNS request for vkontakte.ru"; dns.query; content:"vkontakte.ru"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - VKontakte - Related URL (vkontakte.ru)"; http.uri; content:"vkontakte.ru"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000043; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - VKontakte - Related TLS SNI (vkontakte.ru)"; tls.sni; content:"vkontakte.ru"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000044; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Xing - DNS request for xing.com"; dns.query; content:"xing.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Xing - Related URL (xing.com)"; http.uri; content:"xing.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000046; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Xing - Related TLS SNI (xing.com)"; tls.sni; content:"xing.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000047; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - BeReal - DNS request for bereal.com"; dns.query; content:"bereal.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - BeReal - Related URL (bereal.com)"; http.uri; content:"bereal.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000049; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - BeReal - Related TLS SNI (bereal.com)"; tls.sni; content:"bereal.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000050; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Bluesky - DNS request for bsky.app"; dns.query; content:"bsky.app"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Bluesky - Related URL (bsky.app)"; http.uri; content:"bsky.app"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000052; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Bluesky - Related TLS SNI (bsky.app)"; tls.sni; content:"bsky.app"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000053; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - DeviantArt - DNS request for deviantart.com"; dns.query; content:"deviantart.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - DeviantArt - Related URL (deviantart.com)"; http.uri; content:"deviantart.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000055; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - DeviantArt - Related TLS SNI (deviantart.com)"; tls.sni; content:"deviantart.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000056; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Flickr - DNS request for flickr.com"; dns.query; content:"flickr.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Flickr - Related URL (flickr.com)"; http.uri; content:"flickr.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000058; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Flickr - Related TLS SNI (flickr.com)"; tls.sni; content:"flickr.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000059; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Goodreads - DNS request for goodreads.com"; dns.query; content:"goodreads.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Goodreads - Related URL (goodreads.com)"; http.uri; content:"goodreads.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000061; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Goodreads - Related TLS SNI (goodreads.com)"; tls.sni; content:"goodreads.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000062; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Lemon8 - DNS request for lemon8-app.com"; dns.query; content:"lemon8-app.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Lemon8 - Related URL (lemon8-app.com)"; http.uri; content:"lemon8-app.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000064; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Lemon8 - Related TLS SNI (lemon8-app.com)"; tls.sni; content:"lemon8-app.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000065; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Letterboxd - DNS request for letterboxd.com"; dns.query; content:"letterboxd.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Letterboxd - Related URL (letterboxd.com)"; http.uri; content:"letterboxd.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000067; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Letterboxd - Related TLS SNI (letterboxd.com)"; tls.sni; content:"letterboxd.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000068; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Mastodon - DNS request for mastodon.social"; dns.query; content:"mastodon.social"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Mastodon - Related URL (mastodon.social)"; http.uri; content:"mastodon.social"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000070; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Mastodon - Related TLS SNI (mastodon.social)"; tls.sni; content:"mastodon.social"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000071; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Nextdoor - DNS request for nextdoor.com"; dns.query; content:"nextdoor.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Nextdoor - Related URL (nextdoor.com)"; http.uri; content:"nextdoor.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000073; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Nextdoor - Related TLS SNI (nextdoor.com)"; tls.sni; content:"nextdoor.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000074; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Patreon - DNS request for patreon.com"; dns.query; content:"patreon.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Patreon - Related URL (patreon.com)"; http.uri; content:"patreon.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000076; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Patreon - Related TLS SNI (patreon.com)"; tls.sni; content:"patreon.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000077; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Snapchat - DNS request for snapchat.com"; dns.query; content:"snapchat.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Snapchat - Related URL (snapchat.com)"; http.uri; content:"snapchat.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000079; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Snapchat - Related TLS SNI (snapchat.com)"; tls.sni; content:"snapchat.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000080; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Threads - DNS request for threads.net"; dns.query; content:"threads.net"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Threads - Related URL (threads.net)"; http.uri; content:"threads.net"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000082; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Threads - Related TLS SNI (threads.net)"; tls.sni; content:"threads.net"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000083; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - TikTok - DNS request for tiktok.com"; dns.query; content:"tiktok.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - TikTok - Related URL (tiktok.com)"; http.uri; content:"tiktok.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000085; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - TikTok - Related TLS SNI (tiktok.com)"; tls.sni; content:"tiktok.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000086; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - VKontakte - DNS request for vk.com"; dns.query; content:"vk.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - VKontakte - Related URL (vk.com)"; http.uri; content:"vk.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000088; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - VKontakte - Related TLS SNI (vk.com)"; tls.sni; content:"vk.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000089; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - X - DNS request for x.com"; dns.query; content:"x.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - X - Related URL (x.com)"; http.uri; content:"x.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000091; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - X - Related TLS SNI (x.com)"; tls.sni; content:"x.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000092; rev:1;)
alert dns $HOME_NET any -> any 53 (msg:"OPN_Social_Media - Tumblr - DNS request for tumblr.com"; dns.query; content:"tumblr.com"; nocase; reference:url,social-media; classtype:policy-violation; sid:51000093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"OPN_Social_Media - Tumblr - Related URL (tumblr.com)"; http.uri; content:"tumblr.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000094; rev:1;)
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"OPN_Social_Media - Tumblr - Related TLS SNI (tumblr.com)"; tls.sni; content:"tumblr.com"; flow:to_server,established; reference:url,social-media; classtype:policy-violation; sid:51000095; rev:1;)