This example is a rule with the Snort Rule ID of 1000983.
alert tcp any any -> any 80 (content:"BOB"; sid:1000983; rev:1;)