Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
SCAN:AUDIT:NBSTAT-QUERY |
|---|---|
Severity |
Info |
Recommended |
No |
Category |
SCAN |
Keywords |
NBSTAT Query |
Release Date |
2004/01/08 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
SCAN: NBSTAT Query
This signature detects NBSTAT query packets directed to a netbios or samba server. The server will respond with a full enumeration of all known shares. This query technique is used by worms and attack tools to scan hosts prior to attack. These packets can also be sent by valid clients when connecting to a server.
Extended Description
None
References