alert udp any 161 -> any 161 (msg:"Jaguar Tooth exploit padding"; \
                content:"|2b 06 01 04 01 09 09 5f 01 02 04 01 03|"; \
                content:"AAAAAAAAAAAAAAAAAAAAAAAAAAAA"; distance:1; within:28; \
                content:"|03 03 03 03 04 04 04 04 05 05 05 05 06 06 06 06 07 07 07 07|"; distance:12; within:32; fast_pattern; \
                sid:230418000; rev:1; classtype:misc-attack;\
				metadata:date 2023-04-18;)

alert udp any 161 -> any 161 (msg:"Jaguar Tooth payload deployment"; \
                content:"|2b 06 01 04 01 09 09 5f 01 02 04 01 03|"; \
                content:"AAAAAAAAAAAAAAAAAAAAAAAAAAAAtclq"; distance:1; within:32; fast_pattern; \
                sid:230418001; rev:1; classtype:misc-attack;\
				metadata:date 2023-04-18;)

alert udp any 161 -> any 161 (msg:"Jaguar Tooth payload deployment"; \
                content:"|2b 06 01 04 01 09 09 5f 01 02 04 01 03|"; \
                content:"AAAAAAAAAAAAAAAAAAAAAAAAAAAAenab"; distance:1; within:32; fast_pattern; \
                sid:230418002; rev:1; classtype:misc-attack;\
				metadata:date 2023-04-18;)

alert udp any 161 -> any 161 (msg:"Jaguar Tooth payload deployment"; \
                content:"|2b 06 01 04 01 09 09 5f 01 02 04 01 03|"; \
                content:"AAAAAAAAAAAAAAAAAAAAAAAAAAAAslee"; distance:1; within:32; fast_pattern; \
                sid:230418003; rev:1; classtype:misc-attack;\
				metadata:date 2023-04-18;)

alert udp any 161 -> any 161 (msg:"Jaguar Tooth payload deployment"; \
                content:"|2b 06 01 04 01 09 09 5f 01 02 04 01 03|"; \
                content:"AAAAAAAAAAAAAAAAAAAAAAAAAAAAdisa"; distance:1; within:32; fast_pattern; \
                sid:230418004; rev:1; classtype:misc-attack;\
				metadata:date 2023-04-18;)

alert udp any 161 -> any 161 (msg:"Jaguar Tooth backdoor patch deployment"; \
                content:"|2b 06 01 04 01 09 09 5f 01 02 04 01 03|"; \
                content:"AAAAAAAAAAAAAAAAAAAAAAAAAAAA|03 81 60 00 08|"; distance:1; within:33; fast_pattern; \
                sid:230418005; rev:1; classtype:misc-attack;\
				metadata:date 2023-04-18;)

alert udp any 161 -> any 161 (msg:"Jaguar Tooth backdoor patch deployment"; \
                content:"|2b 06 01 04 01 09 09 5f 01 02 04 01 03|"; \
                content:"AAAAAAAAAAAAAAAAAAAAAAAAAAAA|24 02 00 01|"; distance:1; within:32; fast_pattern; \
                sid:230418006; rev:1; classtype:misc-attack;\
				metadata:date 2023-04-18;)