alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET INFO WebRTC IP tracking Javascript"; flow:established,to_client; file.data; content:"function getIPs|28|callback|29|"; nocase; fast_pattern; content:"ip_dups"; nocase; content:"handleCandidate"; nocase; content:"RTCPeerConnection"; nocase; reference:url,github.com/diafygi/webrtc-ips; classtype:successful-recon-limited; sid:2021089; rev:4; metadata:created_at 2015_05_13, confidence High, signature_severity Informational, updated_at 2024_03_14;)