""GPL ATTACK_RESPONSE isakmp login failed""
SID: 2102043
Revision: 3
Class Type: misc-activity
Metadata: created_at 2010_09_23, updated_at 2011_08_02
Reference:
Protocol: udp
Source Network: $HOME_NET
Source Port: 500
Destination Network: $EXTERNAL_NET
Destination Port: 500
Flow:
Contents:
-
Value: "|10 05|" Depth: 2 Offset: 17
-
Value: "|00 00 00 01 01 00 00 18|"
Within: 8
PCRE:
Special Options: