""ET SCADA Rockwell RNA Message Large Header Length - 8Kb""
SID: 2049795
Revision: 5
Class Type: attempted-dos
Metadata: attack_target ICS, created_at 2011_09_30, cve CVE_2011_3489, deployment Internal, confidence Medium, signature_severity Major, updated_at 2023_12_27, reviewed_at 2024_03_06, former_sid 2803783
Reference:
Protocol: tcp
Source Network: any
Source Port: !443
Destination Network: $HOME_NET
Destination Port: [1330,1331,1332,4241,4242,4445,4446,5241,6543,9111,60093,49281]
Flow: established,to_server
Contents:
- Value: "rna|f2|" Depth: 4
Within:
PCRE:
Special Options:
- fast_pattern