Rule History

alert udp any 67 -> any 68 (msg:"ET INFO Web Proxy Auto Discovery Protocol WPAD DHCP 252 option Possible BadTunnel"; content:"|02|"; depth:1; content:"|fc|"; byte_jump:1,0,relative,post_offset -9; content:"/wpad.dat"; within:9; fast_pattern; classtype:protocol-command-decode; sid:2022915; rev:2; metadata:created_at 2016_06_24, deprecation_reason Relevance, confidence Medium, signature_severity Informational, updated_at 2024_04_19, reviewed_at 2024_04_19;)