""ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard Low Port)""

SID: 2033077

Revision: 2

Class Type: misc-activity

Metadata: created_at 2021_06_03, deployment Perimeter, deployment alert_only, signature_severity Informational, updated_at 2023_04_24

Reference:

Protocol: udp

Source Network: $HOME_NET

Source Port: any

Destination Network: $EXTERNAL_NET

Destination Port: :1024

Flow:

Contents:

  • Value: "|00 01|" Depth: 2

  • Value: "|21 12 a4 42|"

Within: 4

PCRE:

Special Options:

source