""ET INFO Session Traversal Utilities for NAT (STUN Binding Request)""

SID: 2016149

Revision: 3

Class Type: misc-activity

Metadata: created_at 2013_01_04, deployment Perimeter, deployment alert_only, signature_severity Informational, updated_at 2023_04_24

Reference:

Protocol: udp

Source Network: $HOME_NET

Source Port: any

Destination Network: $EXTERNAL_NET

Destination Port: 3478

Flow:

Contents:

  • Value: "|00 01|" Depth: 2

  • Value: "|21 12 a4 42|"

Within: 4

PCRE:

Special Options:

source