🐾 - 🚨 MDNS for UDP service 🤕 in use - Multicast query observed

SID: 3300154Rev: 30 views
History
Sourcepawpatrules
CreatedMay 29, 2023
UpdatedJanuary 5, 2025
Classificationpolicy-violation
alert udp any 5353 -> 224.0.0.251 5353 (msg:"🐾 - 🚨 MDNS for UDP service 🤕 in use - Multicast query observed"; flow:to_server, stateless; threshold:type limit, track by_src,count 1, seconds 43200; content:"|00 00 00 00 00 01 00 00 00 00 00 00|"; fast_pattern; content:"|5f 75 64 70|"; content:"|00 0c 00 01|"; reference:url,https://github.com/eldraco/Sapito/blob/master/mDNS-services.txt; metadata:created_at 2023_05_29, updated_at 2025_01_05; sid:3300154; rev:3; classtype:policy-violation;)

References

urlhttps://github.com/eldraco/Sapito/blob/master/mDNS-services.txt

Metadata

created at2023_05_29
updated at2025_01_05

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!