ET DNS Non-DNS or Non-Compliant DNS traffic on DNS port Opcode 8 through 15 set

SID: 2014702Rev: 1441 views
History
Sourceet/open
CreatedMay 4, 2012
UpdatedJuly 2, 2024
Classificationpolicy-violation
alert udp $HOME_NET any -> any 53 (msg:"ET DNS Non-DNS or Non-Compliant DNS traffic on DNS port Opcode 8 through 15 set"; content:!"7PYqwfzt"; depth:8; content:!"r6fnvWj8"; depth:8; byte_test:1,&,64,2; threshold:type limit, count 1, seconds 120, track by_dst; reference:md5,a56ec0f9bd46f921f65e4f6e598e5ed0; reference:url,vrt-blog.snort.org/2008/08/checking-multiple-bits-in-flag-field_29.html; classtype:policy-violation; sid:2014702; rev:14; metadata:created_at 2012_05_04, deprecation_reason Performance, performance_impact Significant, signature_severity Informational, updated_at 2024_07_02;)

References

md5
a56ec0f9bd46f921f65e4f6e598e5ed0
Google SearchBrave Search
urlvrt-blog.snort.org/2008/08/checking-multiple-bits-in-flag-field_29.html

Metadata

created at2012_05_04
deprecation reasonPerformance
performance impactSignificant
signature severityInformational
updated at2024_07_02

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!