[KISMET] Spoofed disassociated/deauthenitcate packets

alert any $EXTERNAL_NET any -> $HOME_NET any (msg: "[KISMET] Spoofed disassociated/deauthenitcate packets"; program: kismet_server; meta_content: "%sagan%",DEAUTHFLOOD,BCASTDISCON; classtype: suspicious-traffic; reference: url, http://www.wve.org/entries/show/WVE-2005-0019; reference: url, http://www.wve.org/entries/show/WVE-2005-0045; reference: url, http://www.wve.org/entries/show/WVE-2005-046; reference: url, http://www.wve.org/entries/show/WVE-2005-0061; sid: 5001026; rev:4;)