""GPL SCAN PING CyberKit 2.2 Windows""
SID: 2100483
Revision: 6
Class Type: misc-activity
Metadata: created_at 2010_09_23, updated_at 2011_06_02
Reference:
-
arachnids
-
154
Protocol: icmp
Source Network: $EXTERNAL_NET
Source Port: any
Destination Network: $HOME_NET
Destination Port: any
Flow:
Contents:
- Value: "|AA AA AA AA AA AA AA AA AA AA AA AA AA AA AA AA|" Depth: 32
Within:
PCRE:
Special Options: