[Snort-sigs] Lots of triggers from NETBIOS SMB SMB_COM_TRANSACTION Max Data Count of 0 DOS Attempt

Johnathan Norman jnorman at ...1256...
Tue Apr 22 21:04:06 EDT 2003


They are false positives. I have had the same problem. My sensors updated this weekend 
and when i came into the office monday we had a few thousand events.

--
Johnathan Norman, SCNA,CCSP       Office: 713.484.8383
Network Security Specialist       Email: JNorman at ...1256...
Alert Logic, Inc.                 http://www.alertlogic.net


On Tue, Apr 22, 2003 at 05:02:14PM -0400, Ian Macdonald wrote:
> 
> Has anyone had any problems with the NETBIOS SMB SMB_COM_TRANSACTION Max
> Data Count of 0 DOS Attempt signature. I am seeing a lot of hits and I am
> trying to see if they are false positives.
> 
> Thanks
> 
> Ian
> 
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs






More information about the Snort-sigs mailing list