Signature Detail
Short Name |
SCAN:SENTINEL:TELNET-SPOOF |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
SCAN |
Keywords |
SCANNER |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SCAN: Sentinel Telnet Spoof
This signature detects attempts to TELNET a spoofed MAC address to the server using the Sentinel network scanner.
Extended Description
While not conclusive, the attacker's technique can help indicate which host(s) on a network segment are operating in promiscuous mode.
References