1. Does the rule list any particular oddities or protocol(s) or anything that makes it unique (such as messages)? If so, list these. If not, what should be included?

2. Now, write another version of a Phatbot Rule for Snort. Usually there are several versions for any one particular signature. It does not have to be elaborate, just effective. You may want to research writing rules in the Writing Good Rules document.