Signature Detail
Short Name |
VOIP:SIP:SIPSAK-OPTION-FLOOD |
|---|---|
Severity |
Medium |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
VOIP |
Keywords |
SIPSAK OPTION Flood Backtrack |
Release Date |
2013/08/20 |
Update Number |
2292 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
VOIP: SIPSAK SIP Option Flood
This signature detects the SIPSAK tool (part of the BackTrack tool suite) performing a "OPTION" flood. This can be used to stress-test a SIP server but can also be used to cause a Denial-of-Service (DoS) of the service if used maliciously.
References