Creating Snort Rules

  

1. Complete this rule which would be deployed to detect incoming TCP traffic on port 31337:
 

alert _____ $EXTERNAL_NET _____ -> $HOME_NET _____ (msg:"__________________"; flow:to_client,established; classtype:Suspicious-Traffic; sid:2011010; rev:1;)