""ET POLICY Microsoft TEREDO IPv6 tunneling""

SID: 2003155

Revision: 4

Class Type: misc-activity

Metadata: created_at 2010_07_30, updated_at 2010_07_30

Reference:

Protocol: udp

Source Network: $HOME_NET

Source Port: any

Destination Network: $EXTERNAL_NET

Destination Port: 3544

Flow:

Contents:

  • Value: "|FE 80 00 00 00 00 00 00 80 00|TEREDO" Depth: 16 Offset: 21

Within:

PCRE:

Special Options:

source