*

*** Source information ***

* Source spoofed: unknown

* Node[unknown]:

* Addr[ipv4-addr]: 192.168.1.20

* Service: port=1034 protocol=udp

*

*** Target information ***

* Target decoy: unknown

* Node[unknown]:

* Addr[ipv4-addr]: 239.255.255.250

* Service: port=1900 protocol=udp

*

*** Additional data within the alert  ***

* Ethernet header: 0:90:f5:10:66:ce -> 1:0:5e:7f:ff:fa [ether_type=ip (2048)]

* Ip header:

192.168.1.20 -> 239.255.255.250 [hl=20,version=4,tos=0,len=161,id=47,ttl=1,prot=17]

* Udp header: 1034 -> 1900 [len=141]

* Payload header: size=133 bytes

* Payload Hexadecimal Dump:

4d 2d 53 45  41 52 43 48  20 2a 20 48  54 54 50 2f    M-SEARCH * HTTP/

31 2e 31 0d  0a 48 6f 73  74 3a 32 33  39 2e 32 35     1.1..Host:239.25

35 2e 32 35  35 2e 32 35  30 3a 31 39  30 30 0d 0a    5.255.250:1900..

53 54 3a 75  72 6e 3a 73  63 68 65 6d  61 73 2d 75    ST:urn:schemas-u