""ET ATTACK_RESPONSE Possible IPMI 2.0 RAKP Remote SHA1 Password Hash Retrieval RAKP message 2 status code Unauthorized Name""
SID: 2017121
Revision: 2
Class Type: protocol-command-decode
Metadata: created_at 2013_07_09, updated_at 2014_12_05
Reference:
Protocol: udp
Source Network: $HOME_NET
Source Port: 623
Destination Network: $EXTERNAL_NET
Destination Port: any
Flow:
Contents:
-
Value: "|06 13|" Depth: 2 Offset: 4
-
Value: "|0d|"
Within: 1
PCRE:
Special Options: