[Snort-sigs] FP on 2329

Matthew Watchinski mwatchinski at ...435...
Fri Jul 21 18:44:56 EDT 2006


Actually SQL server sends out probe packets on a dynamically allocated 
port and expects response on the port it picked.  So the destination 
port can be anything.

Cheers,
-matt

trains at ...2395... wrote:
> Destination port should be "1434", not "any"
> 
> tc
> 
> -------------------------------------------------
> Email solutions, MS Exchange alternatives and extrication,
> security services, systems integration.
> Contact:    services at ...2395...
> 
> 
> 
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
> 





More information about the Snort-sigs mailing list