""ET SCAN Cisco Torch TFTP Scan""

SID: 2008414

Revision: 3

Class Type: attempted-recon

Metadata: created_at 2010_07_30, updated_at 2010_08_27

Reference:

• Link

Protocol: udp

Source Network: $EXTERNAL_NET

Source Port: any

Destination Network: $HOME_NET

Destination Port: 69

Flow:

Contents:

• Value: "|52 61 6E 64 30 6D 53 54 52 49 4E 47 00 6E 65 74 61 73 63 69 69|"

Within:

PCRE:

Special Options:

source