alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:"[HUAWEI] ATCKDF - Ip options route record attack"; content: "SEC/4/ATCKDF"; content: "Ip options route record attack"; classtype: misc-attack reference: url, huaweisymantec.com/en/download.do?id=658891; sid: 5001560; rev:1;)
-- Main.Sagan-Wiki-Add - 2015-10-21
New revisions of 5001560 will be below...
alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:"[HUAWEI] ATCKDF - Ip options route record attack"; content: "SEC/4/ATCKDF"; content: "Ip options route record attack"; classtype: misc-attack; reference: url, huaweisymantec.com/en/download.do?id=658891; sid: 5001560; rev:2;)
-- Main.Sagan-Wiki-Add - 2016-7-7
alert any $EXTERNAL_NET any -> $HOME_NET any (msg:"[HUAWEI] ATCKDF - Ip options route record attack"; content: "SEC/4/ATCKDF"; content: "Ip options route record attack"; default_proto: tcp; classtype: misc-attack; reference: url, huaweisymantec.com/en/download.do?id=658891; sid: 5001560; rev:3;)
-- Main.Sagan-Wiki-Add - 2021-4-12