[HUAWEI] USER_NOT_EXIST

alert any $EXTERNAL_NET any -> $HOME_NET any (msg:"[HUAWEI] USER_NOT_EXIST"; content:"SSH/4/LOGIN_FAIL_USER_NOT_EXIST"; default_proto: tcp; default_dst_port: $SSH_PORT; classtype: unsuccessful-user; threshold: type suppress, track by_src, count 5, seconds 300;  reference: url, http://www.huaweisymantec.com/en//download.do?id=658891; sid: 5001532; rev:5;)