ip dst(WebServers) tcp dst(80) tcp nocase(chunked) message=%sip-%dip Apache Chunked Encoding Attack Bugtraq 5033 action=drop icmp type(8) message=%sip-%dip icmp echo request action=log