[Snort-sigs] False positives on 1321.8 (BAD-TRAFFIC 0 ttl)

nnposter at ...592... nnposter at ...592...
Mon Jun 7 09:23:13 EDT 2004


Rule:
BAD-TRAFFIC 0 ttl

--
Sid:
1321

--
Summary:

--
Impact:

--
Detailed Information:

--
Affected Systems:

--
Attack Scenarios:

--
Ease of Attack:

--
False Positives:

Samba sends NetBIOS name service broadcast packets with TTL 0.

--
False Negatives:

--
Corrective Action:

--
Contributors:

-- 
Additional References:




More information about the Snort-sigs mailing list