🐾 - 🚨 NMEA 0183 ⛵ based solution (mDNS query observed)

SID: 3300152Rev: 11 views
Sourcepawpatrules
CreatedApril 14, 2023
UpdatedApril 14, 2023
Classificationpolicy-violation
alert udp any 5353 -> 224.0.0.251 5353 (msg:"🐾 - 🚨 NMEA 0183 ⛵ based solution (mDNS query observed)"; flow:to_server, stateless; threshold:type limit, track by_src,count 1, seconds 43200; content:"|00 00 00 00 00 01 00 00 00 00 00 00|"; fast_pattern; content:"|5f 6e 6d 65 61 2d 30 31 38 33 04 5f 74 63 70 05 6c 6f 63 61 6c 00|"; content:"|00 0c 00 01|"; reference:url,https://en.wikipedia.org/wiki/NMEA_0183; metadata:created_at 2023_04_14, updated_at 2023_04_14; sid:3300152; rev:1; classtype:policy-violation;)

References

urlhttps://en.wikipedia.org/wiki/NMEA_0183

Metadata

created at2023_04_14
updated at2023_04_14

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!