[Snort-users] MS-SQL ping attempt is illegal or not?

sb ch chulmin22 at ...125...
Tue May 13 21:57:14 EDT 2003


Hello, all.

I found this log, and I don't know what's the meaning of the " MS-SQL ping 
attempt".
Is this a slammer worm which use udp 1434 related or not?
May I ignore or not?
Surely, this server(200.0.xx.xx) is fully patched.
 
[**] [1:2049:1] MS-SQL ping attempt [**]
[Classification: Misc activity] [Priority: 3] 
05/13-17:53:01.383084 200.0.xx.xx.2:1936 -> xxx.xxx.255.255:1434
UDP TTL:126 TOS:0x0 ID:4844 IpLen:20 DgmLen:29
Len: 1
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=10674]


Thanks.

_________________________________________________________________
상큼한 만남과 따뜻한 공동체 생활...  지금 MSN 커뮤니티에서 시작하세요!   
http://groups.msn.com/?pgmarket=ko-kr  





More information about the Snort-users mailing list