Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

Short Name

NETBIOS:NBDS:INVALID:PROTO

Severity

High

Recommended

No

Category

NETBIOS

Release Date

2004/01/29

Update Number

1213

Supported Platforms

di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+

NETBIOS: Invalid Protocol


This protocol anomaly detects a NetBIOS message with a USER_DATA section that is less than the size of SMB header, or the protocol field of the SMB header does not start with 0xff "S" "M" "B".

Extended Description

This is a NetBIOS protocol anomaly.

References

  • URL: http://www.faqs.org/rfcs/rfc1002.html
  • URL: http://ubiqx.org/cifs/rfc-draft/draft-leach-cifs-v1-spec-02.html#s2.4.2
  • URL: http://timothydevans.me.uk/nbf2cifs/x2135.html

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out