""ET DOS Possible NTP DDoS Inbound Frequent Un-Authed PEER_LIST_SUM Requests IMPL 0x03""

SID: 2019018

Revision: 3

Class Type: attempted-dos

Metadata: created_at 2014_08_26, updated_at 2014_12_05

Reference:

• Link

Protocol: udp

Source Network: any

Source Port: any

Destination Network: any

Destination Port: 123

Flow:

Contents:

• Value: "|00 03 01|" Depth: 3 Offset: 1

Within:

PCRE:

Special Options:

source