alert udp $EXTERNAL_NET 21119 -> $HOME_NET any (msg:"ET INFO RustDesk Peer Discovery (pong)"; content:"|70 6f 6e 67|"; offset:5; fast_pattern; content:"|1a 0a|"; distance:0; content:"|22 03|"; distance:0; content:"|2a 20|"; distance:0; content:"|32 06|"; distance:0; classtype:misc-activity; sid:2044074; rev:1; metadata:attack_target Client_Endpoint, created_at 2023_02_02, deployment Perimeter, confidence High, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2023_02_02;)