""ET INFO Session Traversal Utilities for NAT (STUN Binding Response)""

SID: 2016150

Revision: 3

Class Type: misc-activity

Metadata: created_at 2013_01_04, deployment Perimeter, deployment alert_only, signature_severity Informational, updated_at 2023_04_24

Reference:

Protocol: udp

Source Network: $EXTERNAL_NET

Source Port: 3478

Destination Network: $HOME_NET

Destination Port: any

Flow:

Contents:

  • Value: "|01 01|" Depth: 2

  • Value: "|21 12 a4 42|"

Within: 4

PCRE:

Special Options:

source