[Snort-sigs] Lots of triggers from NETBIOS SMB SMB_COM_TRANSACTION Max Data Count of 0 DOS Attempt

Brian bmc at ...95...
Tue Apr 22 22:41:06 EDT 2003


On Tue, Apr 22, 2003 at 10:59:24PM -0500, Johnathan Norman wrote:
> They are false positives. I have had the same problem. My sensors updated this weekend 
> and when i came into the office monday we had a few thousand events.

Can you guys try the suggestion I made here:

   http://marc.theaimsgroup.com/?l=snort-sigs&m=105004489606354&w=2

And let me know?

-brian




More information about the Snort-sigs mailing list