[Snort-users] MS-SQL ping attempt is illegal or not?
chulmin22 at ...125...
Tue May 13 21:57:14 EDT 2003
I found this log, and I don't know what's the meaning of the " MS-SQL ping
Is this a slammer worm which use udp 1434 related or not?
May I ignore or not?
Surely, this server(200.0.xx.xx) is fully patched.
[**] [1:2049:1] MS-SQL ping attempt [**]
[Classification: Misc activity] [Priority: 3]
05/13-17:53:01.383084 200.0.xx.xx.2:1936 -> xxx.xxx.255.255:1434
UDP TTL:126 TOS:0x0 ID:4844 IpLen:20 DgmLen:29
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=10674]
상큼한 만남과 따뜻한 공동체 생활... 지금 MSN 커뮤니티에서 시작하세요!
More information about the Snort-users