3. Complete the rule below to check for the text string malware in the payload section of a TCP packet which starts after 32 bytes: alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:"Malware String Detected; content:malware; _____:32; nocase; flow:to_client,established; classtype:Suspicious-Traffic; sid:2011010; rev:1;)