[Snort-users] 'BAD TRAFFIC udp port 0 traffic' hitting Windows Media server

bthaler at ...2720... bthaler at ...2720...
Thu Feb 14 11:54:47 EST 2002


Quick question, snorters:

Is there any reason a Windows Media server should be receiving lots of 'BAD
TRAFFIC udp port 0 traffic '?

Anyone else experience this?  Is it indicative of anything in particular?
The bad-traffic.rules file only says that:

"These signatures are representative of traffic that should never be seen on
any network.  None of these signatures include datagram content checking and
are extremely quick signatures".

Snort-1.8.2 build 86




Sincerely,

Brad T.





More information about the Snort-users mailing list