""ET POLICY Splashtop Remote Control Session Keepalive Response""

SID: 2014130

Revision: 2

Class Type: not-suspicious

Metadata: created_at 2012_01_16, updated_at 2014_12_05

Reference:

Protocol: tcp

Source Network: any

Source Port: 6784

Destination Network: $HOME_NET

Destination Port: 1024:

Flow: established,from_server

Contents:

  • Value: "|31 00|" Depth: 2 Offset: 2

Within:

PCRE:

Special Options:

source