[Snort-sigs] "MS-SQL ping attempt" is illegal or not?

sb ch chulmin22 at ...12...
Mon Jun 2 03:38:04 EDT 2003

Hello, all.

I found this log, and I don't know what's the meaning of the " MS-SQL ping 
Is this a slammer worm which use udp 1434 related or not?
May I ignore or not?
Surely, this server(200.0.xx.xx) is fully patched.
[**] [1:2049:1] MS-SQL ping attempt [**]
[Classification: Misc activity] [Priority: 3] 
05/13-17:53:01.383084 200.0.xx.xx.2:1936 ->
UDP TTL:126 TOS:0x0 ID:4844 IpLen:20 DgmLen:29
Len: 1
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=10674]

Thanks in advance.

도처에 도사리는 재해의 위험들. AIG의 무료보험으로 해결하세요.   

More information about the Snort-sigs mailing list