""ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)""

SID: 2033078

Revision: 4

Class Type: misc-activity

Metadata: created_at 2021_06_03, deployment Perimeter, deployment alert_only, signature_severity Informational, updated_at 2023_04_28

Reference:

• Link

Protocol: udp

Source Network: $HOME_NET

Source Port: any

Destination Network: $EXTERNAL_NET

Destination Port: [!3478,1023:]

Flow:

Contents:

• Value: "|00 01|" Depth: 2

• Value: "|21 12 a4 42|"

Within: 4

PCRE:

Special Options:

source