SID: 2014548

Revision: 2

Class Type: bad-unknown

Metadata: created_at 2012_04_12, tag TDS, updated_at 2012_04_25

Reference:

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: $HTTP_PORTS

Destination Network: $HOME_NET

Destination Port: any

Flow: established,to_client

Contents:

  • Value: !"302"

  • Value: "=_"

  • Value: "_\

Within: 10

PCRE: "/^[a-z]{5}[0-9]{1,2}=[0-9]{1,2}/C"

Special Options:

  • http_stat_code

  • domain="

source