""ET INFO Web Proxy Auto Discovery Protocol WPAD DHCP 252 option Possible BadTunnel""

SID: 2022915

Revision: 1

Class Type: protocol-command-decode

Metadata: created_at 2016_06_24, updated_at 2023_11_27

Reference:

Protocol: udp

Source Network: any

Source Port: 67

Destination Network: any

Destination Port: 68

Flow:

Contents:

  • Value: "|02|" Depth: 1

  • Value: "|fc|"

  • Value: "/wpad.dat"

Within: 9

PCRE:

Special Options:

  • fast_pattern

source