""ET CURRENT_EVENTS Open MGate Device""
SID: 2022732
Revision: 2
Class Type: successful-admin
Metadata: created_at 2016_04_14, updated_at 2016_04_19
Reference:
Protocol: tcp
Source Network: any
Source Port: !80
Destination Network: $HOME_NET
Destination Port: any
Flow: established,from_server
Contents:
-
Value: "Model name|20|"
-
Value: "|0d 00 0a|MAC address|20|"
Within:
PCRE: "/^\x20+\x3a\x20(?:[0-9A-F]{2}\x3a){5}[0-9A-F]{2}\x0d\x00\x0a/R"
Special Options: