[Snort-sigs] NetBios Fragmentation Issues

snort guy snort-guy at ...12...
Sun Feb 19 11:36:01 EST 2006

NetBios Fragmentation
On October 2004, a presentation was held mentioning the fragmentation 
weaknesses of snort. I would like to know the status of these issues.

"SNORT 2.2.0
Fails test for small TCP sends during SPDETECT
Fails test for small SMB writes during LSASS
Fails test for small DCE fragments
Score: 0/3
False positives on any IPC$ access.
More to come!"

On the presentation from the url 

Is your PC infected? Get a FREE online computer virus scan from McAfee� 
Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

More information about the Snort-sigs mailing list