[Snort-sigs] Lots of triggers from NETBIOS SMB SMB_COM_TRANSACTION Max Data Count of 0 DOS Attempt

Brian bmc at ...95...
Tue Apr 22 22:41:06 EDT 2003

On Tue, Apr 22, 2003 at 10:59:24PM -0500, Johnathan Norman wrote:
> They are false positives. I have had the same problem. My sensors updated this weekend 
> and when i came into the office monday we had a few thousand events.

Can you guys try the suggestion I made here:


And let me know?


More information about the Snort-sigs mailing list