Sourcefire VRT Certified Rules Update

Date: 2005-05-31

This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack.

The format of the file is:

sid - Message (rule group)

New rules:
3639 - NETBIOS SMB Trans andx data displacement null pointer DOS attempt (netbios.rules)
3640 - NETBIOS SMB Trans data displacement null pointer DOS attempt (netbios.rules)
3641 - NETBIOS SMB Trans unicode data displacement null pointer DOS attempt (netbios.rules)
3642 - NETBIOS SMB Trans unicode andx data displacement null pointer DOS attempt (netbios.rules)
3643 - NETBIOS SMB-DS Trans andx data displacement null pointer DOS attempt (netbios.rules)
3644 - NETBIOS SMB-DS Trans data displacement null pointer DOS attempt (netbios.rules)
3645 - NETBIOS SMB-DS Trans unicode data displacement null pointer DOS attempt (netbios.rules)
3646 - NETBIOS SMB-DS Trans unicode andx data displacement null pointer DOS attempt (netbios.rules)
3647 - NETBIOS-DG SMB Trans andx data displacement null pointer DOS attempt (netbios.rules)
3648 - NETBIOS-DG SMB Trans data displacement null pointer DOS attempt (netbios.rules)
3649 - NETBIOS-DG SMB Trans unicode data displacement null pointer DOS attempt (netbios.rules)
3650 - NETBIOS-DG SMB Trans unicode andx data displacement null pointer DOS attempt (netbios.rules)
3665 - MYSQL server greeting (mysql.rules)
3666 - MYSQL server greeting finished (mysql.rules)
3667 - MYSQL protocol 41 client authentication bypass attempt (mysql.rules)
3668 - MYSQL client authentication bypass attempt (mysql.rules)
3669 - MYSQL protocol 41 secure client overflow attempt (mysql.rules)
3670 - MYSQL secure client overflow attempt (mysql.rules)
3671 - MYSQL protocol 41 client overflow attempt (mysql.rules)
3672 - MYSQL client overflow attempt (mysql.rules)
3673 - MISC Microsoft SMS remote control client DoS overly long length attempt (misc.rules)
3674 - WEB-CGI db4web_c directory traversal attempt (web-cgi.rules)
3675 - MISC IBM DB2 DTS empty format string dos attempt (misc.rules)
3676 - WEB-MISC newsscript.pl admin attempt (web-misc.rules)
3677 - EXPLOIT SIP UDP CSeq overflow attempt (exploit.rules)
3678 - EXPLOIT SIP TCP CSeq overflow attempt (exploit.rules)
3679 - WEB-CLIENT Firefox IFRAME src javascript code execution (web-client.rules)

Updated rules:
 115 - BACKDOOR NetBus Pro 2.0 connection established (backdoor.rules)
 532 - NETBIOS SMB ADMIN$ share access (netbios.rules)
 533 - NETBIOS SMB C$ share access (netbios.rules)
 536 - NETBIOS SMB D$ share access (netbios.rules)
 537 - NETBIOS SMB IPC$ share access (netbios.rules)
 538 - NETBIOS SMB IPC$ unicode share access (netbios.rules)
 837 - WEB-CGI uploader.exe access (web-cgi.rules)
1455 - WEB-CGI calender.pl access (web-cgi.rules)
1550 - SMTP ETRN overflow attempt (smtp.rules)
1631 - CHAT AIM login (chat.rules)
1772 - WEB-IIS pbserver access (web-iis.rules)
1826 - WEB-MISC WEB-INF access (web-misc.rules)
1844 - IMAP authenticate overflow attempt (imap.rules)
1909 - RPC CMSD TCP CMSD_INSERT buffer overflow attempt (rpc.rules)
1919 - FTP CWD overflow attempt (ftp.rules)
1931 - WEB-CGI rpc-nlog.pl access (web-cgi.rules)
2031 - RPC yppasswd user update UDP (rpc.rules)
2050 - MS-SQL version overflow attempt (sql.rules)
2174 - NETBIOS SMB winreg create tree attempt (netbios.rules)
2175 - NETBIOS SMB winreg unicode create tree attempt (netbios.rules)
2344 - FTP XCWD overflow attempt (ftp.rules)
2382 - NETBIOS SMB Session Setup NTMLSSP asn1 overflow attempt (netbios.rules)
2383 - NETBIOS SMB-DS Session Setup NTMLSSP asn1 overflow attempt (netbios.rules)
2446 - EXPLOIT ICQ SRV_MULTI/SRV_META_USER overflow attempt (exploit.rules)
2465 - NETBIOS SMB-DS IPC$ share access (netbios.rules)
2466 - NETBIOS SMB-DS IPC$ unicode share access (netbios.rules)
2467 - NETBIOS SMB D$ unicode share access (netbios.rules)
2468 - NETBIOS SMB-DS D$ share access (netbios.rules)
2469 - NETBIOS SMB-DS D$ unicode share access (netbios.rules)
2470 - NETBIOS SMB C$ unicode share access (netbios.rules)
2471 - NETBIOS SMB-DS C$ share access (netbios.rules)
2472 - NETBIOS SMB-DS C$ unicode share access (netbios.rules)
2473 - NETBIOS SMB ADMIN$ unicode share access (netbios.rules)
2474 - NETBIOS SMB-DS ADMIN$ share access (netbios.rules)
2475 - NETBIOS SMB-DS ADMIN$ unicode share access (netbios.rules)
2476 - NETBIOS SMB-DS winreg create tree attempt (netbios.rules)
2477 - NETBIOS SMB-DS winreg unicode create tree attempt (netbios.rules)
2478 - NETBIOS SMB-DS winreg bind attempt (netbios.rules)
2479 - NETBIOS SMB-DS winreg unicode bind attempt (netbios.rules)
2480 - NETBIOS SMB-DS InitiateSystemShutdown unicode attempt (netbios.rules)
2481 - NETBIOS SMB-DS InitiateSystemShutdown unicode little endian attempt (netbios.rules)
2482 - NETBIOS SMB-DS InitiateSystemShutdown attempt (netbios.rules)
2483 - NETBIOS SMB-DS InitiateSystemShutdown little endian attempt (netbios.rules)
2590 - SMTP MAIL FROM overflow attempt (smtp.rules)
2923 - NETBIOS SMB repeated logon failure (netbios.rules)
2924 - NETBIOS SMB-DS repeated logon failure (netbios.rules)
2925 - INFO web bug 0x0 gif attempt (info.rules)
2928 - NETBIOS SMB nddeapi create tree attempt (netbios.rules)
2929 - NETBIOS SMB nddeapi unicode create tree attempt (netbios.rules)
2930 - NETBIOS SMB-DS nddeapi create tree attempt (netbios.rules)
2931 - NETBIOS SMB-DS nddeapi unicode create tree attempt (netbios.rules)
2932 - NETBIOS SMB nddeapi bind attempt (netbios.rules)
2933 - NETBIOS SMB nddeapi unicode bind attempt (netbios.rules)
2934 - NETBIOS SMB-DS nddeapi bind attempt (netbios.rules)
2935 - NETBIOS SMB-DS nddeapi unicode bind attempt (netbios.rules)
2936 - NETBIOS SMB NDdeSetTrustedShareW overflow attempt (netbios.rules)
2937 - NETBIOS SMB NDdeSetTrustedShareW unicode overflow attempt (netbios.rules)
2938 - NETBIOS SMB-DS NDdeSetTrustedShareW overflow attempt (netbios.rules)
2939 - NETBIOS SMB-DS NDdeSetTrustedShareW unicode overflow attempt (netbios.rules)
2940 - NETBIOS SMB winreg bind attempt (netbios.rules)
2941 - NETBIOS SMB winreg unicode bind attempt (netbios.rules)
2942 - NETBIOS SMB InitiateSystemShutdown attempt (netbios.rules)
2943 - NETBIOS SMB InitiateSystemShutdown little endian attempt (netbios.rules)
2944 - NETBIOS SMB InitiateSystemShutdown unicode attempt (netbios.rules)
2945 - NETBIOS SMB InitiateSystemShutdown unicode little endian attempt (netbios.rules)
2946 - NETBIOS SMB NDdeSetTrustedShareW little endian overflow attempt (netbios.rules)
2947 - NETBIOS SMB NDdeSetTrustedShareW unicode little endian overflow attempt (netbios.rules)
2948 - NETBIOS SMB-DS NDdeSetTrustedShareW little endian overflow attempt (netbios.rules)
2949 - NETBIOS SMB-DS NDdeSetTrustedShareW unicode little endian overflow attempt (netbios.rules)
2950 - NETBIOS SMB too many stacked requests (netbios.rules)
2951 - NETBIOS SMB-DS too many stacked requests (netbios.rules)
2952 - NETBIOS SMB IPC$ andx share access (netbios.rules)
2953 - NETBIOS SMB IPC$ unicode andx share access (netbios.rules)
2954 - NETBIOS SMB-DS IPC$ andx share access (netbios.rules)
2955 - NETBIOS SMB-DS IPC$ unicode andx share access (netbios.rules)
2956 - NETBIOS SMB nddeapi andx create tree attempt (netbios.rules)
2957 - NETBIOS SMB nddeapi unicode andx create tree attempt (netbios.rules)
2958 - NETBIOS SMB-DS nddeapi andx create tree attempt (netbios.rules)
2959 - NETBIOS SMB-DS nddeapi unicode andx create tree attempt (netbios.rules)
2960 - NETBIOS SMB nddeapi andx bind attempt (netbios.rules)
2961 - NETBIOS SMB nddeapi unicode andx bind attempt (netbios.rules)
2962 - NETBIOS SMB-DS nddeapi andx bind attempt (netbios.rules)
2963 - NETBIOS SMB-DS nddeapi unicode andx bind attempt (netbios.rules)
2964 - NETBIOS SMB NDdeSetTrustedShareW andx overflow attempt (netbios.rules)
2965 - NETBIOS SMB NDdeSetTrustedShareW little endian andx overflow attempt (netbios.rules)
2966 - NETBIOS SMB NDdeSetTrustedShareW unicode andx overflow attempt (netbios.rules)
2967 - NETBIOS SMB NDdeSetTrustedShareW unicode little endian andx overflow attempt (netbios.rules)
2968 - NETBIOS SMB-DS NDdeSetTrustedShareW andx overflow attempt (netbios.rules)
2969 - NETBIOS SMB-DS NDdeSetTrustedShareW little endian andx overflow attempt (netbios.rules)
2970 - NETBIOS SMB-DS NDdeSetTrustedShareW unicode andx overflow attempt (netbios.rules)
2971 - NETBIOS SMB-DS NDdeSetTrustedShareW unicode little endian andx overflow attempt (netbios.rules)
2972 - NETBIOS SMB D$ andx share access (netbios.rules)
2973 - NETBIOS SMB D$ unicode andx share access (netbios.rules)
2974 - NETBIOS SMB-DS D$ andx share access (netbios.rules)
2975 - NETBIOS SMB-DS D$ unicode andx share access (netbios.rules)
2976 - NETBIOS SMB C$ andx share access (netbios.rules)
2977 - NETBIOS SMB C$ unicode andx share access (netbios.rules)
2978 - NETBIOS SMB-DS C$ andx share access (netbios.rules)
2979 - NETBIOS SMB-DS C$ unicode andx share access (netbios.rules)
2980 - NETBIOS SMB ADMIN$ andx share access (netbios.rules)
2981 - NETBIOS SMB ADMIN$ unicode andx share access (netbios.rules)
2982 - NETBIOS SMB-DS ADMIN$ andx share access (netbios.rules)
2983 - NETBIOS SMB-DS ADMIN$ unicode andx share access (netbios.rules)
2984 - NETBIOS SMB winreg andx create tree attempt (netbios.rules)
2985 - NETBIOS SMB winreg unicode andx create tree attempt (netbios.rules)
2986 - NETBIOS SMB-DS winreg andx create tree attempt (netbios.rules)
2987 - NETBIOS SMB-DS winreg unicode andx create tree attempt (netbios.rules)
2988 - NETBIOS SMB winreg andx bind attempt (netbios.rules)
2989 - NETBIOS SMB winreg unicode andx bind attempt (netbios.rules)
2990 - NETBIOS SMB-DS winreg andx bind attempt (netbios.rules)
2991 - NETBIOS SMB-DS winreg unicode andx bind attempt (netbios.rules)
2992 - NETBIOS SMB InitiateSystemShutdown andx attempt (netbios.rules)
2993 - NETBIOS SMB InitiateSystemShutdown little endian andx attempt (netbios.rules)
2994 - NETBIOS SMB InitiateSystemShutdown unicode andx attempt (netbios.rules)
2995 - NETBIOS SMB InitiateSystemShutdown unicode little endian andx attempt (netbios.rules)
2996 - NETBIOS SMB-DS InitiateSystemShutdown andx attempt (netbios.rules)
2997 - NETBIOS SMB-DS InitiateSystemShutdown little endian andx attempt (netbios.rules)
2998 - NETBIOS SMB-DS InitiateSystemShutdown unicode andx attempt (netbios.rules)
2999 - NETBIOS SMB-DS InitiateSystemShutdown unicode little endian andx attempt (netbios.rules)
3000 - NETBIOS SMB Session Setup NTMLSSP unicode asn1 overflow attempt (netbios.rules)
3001 - NETBIOS SMB Session Setup NTMLSSP andx asn1 overflow attempt (netbios.rules)
3002 - NETBIOS SMB Session Setup NTMLSSP unicode andx asn1 overflow attempt (netbios.rules)
3003 - NETBIOS SMB-DS Session Setup NTMLSSP unicode asn1 overflow attempt (netbios.rules)
3004 - NETBIOS SMB-DS Session Setup NTMLSSP andx asn1 overflow attempt (netbios.rules)
3005 - NETBIOS SMB-DS Session Setup NTMLSSP unicode andx asn1 overflow attempt (netbios.rules)
3006 - EXPLOIT Volition Freespace 2 buffer overflow attempt (exploit.rules)
3009 - BACKDOOR NetBus Pro 2.0 connection request (backdoor.rules)
3014 - BACKDOOR Asylum 0.1 connection established (backdoor.rules)
3015 - BACKDOOR Insane Network 4.0 connection established (backdoor.rules)
3016 - BACKDOOR Insane Network 4.0 connection established port 63536 (backdoor.rules)
3017 - EXPLOIT WINS overflow attempt (exploit.rules)
3018 - NETBIOS SMB NT Trans NT CREATE oversized Security Descriptor attempt (netbios.rules)
3019 - NETBIOS SMB NT Trans NT CREATE andx oversized Security Descriptor attempt (netbios.rules)
3020 - NETBIOS SMB NT Trans NT CREATE unicode oversized Security Descriptor attempt (netbios.rules)
3021 - NETBIOS SMB NT Trans NT CREATE unicode andx oversized Security Descriptor attempt (netbios.rules)
3022 - NETBIOS SMB-DS NT Trans NT CREATE oversized Security Descriptor attempt (netbios.rules)
3023 - NETBIOS SMB-DS NT Trans NT CREATE andx oversized Security Descriptor attempt (netbios.rules)
3024 - NETBIOS SMB-DS NT Trans NT CREATE unicode oversized Security Descriptor attempt (netbios.rules)
3025 - NETBIOS SMB-DS NT Trans NT CREATE unicode andx oversized Security Descriptor attempt (netbios.rules)
3026 - NETBIOS SMB NT Trans NT CREATE SACL overflow attempt (netbios.rules)
3027 - NETBIOS SMB NT Trans NT CREATE andx SACL overflow attempt (netbios.rules)
3028 - NETBIOS SMB NT Trans NT CREATE unicode SACL overflow attempt (netbios.rules)
3029 - NETBIOS SMB NT Trans NT CREATE unicode andx SACL overflow attempt (netbios.rules)
3030 - NETBIOS SMB-DS NT Trans NT CREATE SACL overflow attempt (netbios.rules)
3031 - NETBIOS SMB-DS NT Trans NT CREATE andx SACL overflow attempt (netbios.rules)
3032 - NETBIOS SMB-DS NT Trans NT CREATE unicode SACL overflow attempt (netbios.rules)
3033 - NETBIOS SMB-DS NT Trans NT CREATE unicode andx SACL overflow attempt (netbios.rules)
3034 - NETBIOS SMB NT Trans NT CREATE DACL overflow attempt (netbios.rules)
3035 - NETBIOS SMB NT Trans NT CREATE andx DACL overflow attempt (netbios.rules)
3036 - NETBIOS SMB NT Trans NT CREATE unicode DACL overflow attempt (netbios.rules)
3037 - NETBIOS SMB NT Trans NT CREATE unicode andx DACL overflow attempt (netbios.rules)
3038 - NETBIOS SMB-DS NT Trans NT CREATE DACL overflow attempt (netbios.rules)
3039 - NETBIOS SMB-DS NT Trans NT CREATE andx DACL overflow attempt (netbios.rules)
3040 - NETBIOS SMB-DS NT Trans NT CREATE unicode DACL overflow attempt (netbios.rules)
3041 - NETBIOS SMB-DS NT Trans NT CREATE unicode andx DACL overflow attempt (netbios.rules)
3042 - NETBIOS SMB NT Trans NT CREATE invalid SACL ace size dos attempt (netbios.rules)
3043 - NETBIOS SMB NT Trans NT CREATE andx invalid SACL ace size dos attempt (netbios.rules)
3044 - NETBIOS SMB NT Trans NT CREATE unicode invalid SACL ace size dos attempt (netbios.rules)
3045 - NETBIOS SMB NT Trans NT CREATE unicode andx invalid SACL ace size dos attempt (netbios.rules)
3046 - NETBIOS SMB-DS NT Trans NT CREATE invalid SACL ace size dos attempt (netbios.rules)
3047 - NETBIOS SMB-DS NT Trans NT CREATE andx invalid SACL ace size dos attempt (netbios.rules)
3048 - NETBIOS SMB-DS NT Trans NT CREATE unicode invalid SACL ace size dos attempt (netbios.rules)
3049 - NETBIOS SMB-DS NT Trans NT CREATE unicode andx invalid SACL ace size dos attempt (netbios.rules)
3050 - NETBIOS SMB NT Trans NT CREATE invalid SACL ace size dos attempt (netbios.rules)
3051 - NETBIOS SMB NT Trans NT CREATE andx invalid SACL ace size dos attempt (netbios.rules)
3052 - NETBIOS SMB NT Trans NT CREATE unicode invalid SACL ace size dos attempt (netbios.rules)
3053 - NETBIOS SMB NT Trans NT CREATE unicode andx invalid SACL ace size dos attempt (netbios.rules)
3054 - NETBIOS SMB-DS NT Trans NT CREATE invalid SACL ace size dos attempt (netbios.rules)
3055 - NETBIOS SMB-DS NT Trans NT CREATE andx invalid SACL ace size dos attempt (netbios.rules)
3056 - NETBIOS SMB-DS NT Trans NT CREATE unicode invalid SACL ace size dos attempt (netbios.rules)
3057 - NETBIOS SMB-DS NT Trans NT CREATE unicode andx invalid SACL ace size dos attempt (netbios.rules)
3061 - MISC distccd command execution attempt (misc.rules)
3063 - BACKDOOR Vampire 1.2 connection request (backdoor.rules)
3064 - BACKDOOR Vampire 1.2 connection confirmation (backdoor.rules)
3079 - WEB-CLIENT Microsoft ANI file parsing overflow (web-client.rules)
3080 - MISC Unreal Tournament secure overflow attempt (misc.rules)
3084 - EXPLOIT Veritas backup overflow attempt (exploit.rules)
3085 - EXPLOIT AIM goaway message buffer overflow attempt (exploit.rules)
3087 - WEB-IIS w3who.dll buffer overflow attempt (web-iis.rules)
3089 - DOS squid WCCP I_SEE_YOU message overflow attempt (dos.rules)
3090 - NETBIOS SMB llsrpc create tree attempt (netbios.rules)
3091 - NETBIOS SMB llsrpc unicode create tree attempt (netbios.rules)
3092 - NETBIOS SMB llsrpc andx create tree attempt (netbios.rules)
3093 - NETBIOS SMB llsrpc unicode andx create tree attempt (netbios.rules)
3094 - NETBIOS SMB-DS llsrpc create tree attempt (netbios.rules)
3095 - NETBIOS SMB-DS llsrpc unicode create tree attempt (netbios.rules)
3096 - NETBIOS SMB-DS llsrpc andx create tree attempt (netbios.rules)
3097 - NETBIOS SMB-DS llsrpc unicode andx create tree attempt (netbios.rules)
3098 - NETBIOS SMB llsrpc bind attempt (netbios.rules)
3099 - NETBIOS SMB llsrpc little endian bind attempt (netbios.rules)
3100 - NETBIOS SMB llsrpc unicode bind attempt (netbios.rules)
3101 - NETBIOS SMB llsrpc unicode little endian bind attempt (netbios.rules)
3102 - NETBIOS SMB llsrpc andx bind attempt (netbios.rules)
3103 - NETBIOS SMB llsrpc little endian andx bind attempt (netbios.rules)
3104 - NETBIOS SMB llsrpc unicode andx bind attempt (netbios.rules)
3105 - NETBIOS SMB llsrpc unicode little endian andx bind attempt (netbios.rules)
3106 - NETBIOS SMB-DS llsrpc bind attempt (netbios.rules)
3107 - NETBIOS SMB-DS llsrpc little endian bind attempt (netbios.rules)
3108 - NETBIOS SMB-DS llsrpc unicode bind attempt (netbios.rules)
3109 - NETBIOS SMB-DS llsrpc unicode little endian bind attempt (netbios.rules)
3110 - NETBIOS SMB-DS llsrpc andx bind attempt (netbios.rules)
3111 - NETBIOS SMB-DS llsrpc little endian andx bind attempt (netbios.rules)
3112 - NETBIOS SMB-DS llsrpc unicode andx bind attempt (netbios.rules)
3113 - NETBIOS SMB-DS llsrpc unicode little endian andx bind attempt (netbios.rules)
3114 - NETBIOS SMB llsrconnect overflow attempt (netbios.rules)
3115 - NETBIOS SMB llsrconnect little endian overflow attempt (netbios.rules)
3116 - NETBIOS SMB llsrconnect unicode overflow attempt (netbios.rules)
3117 - NETBIOS SMB llsrconnect unicode little endian overflow attempt (netbios.rules)
3118 - NETBIOS SMB llsrconnect andx overflow attempt (netbios.rules)
3119 - NETBIOS SMB llsrconnect little endian andx overflow attempt (netbios.rules)
3120 - NETBIOS SMB llsrconnect unicode andx overflow attempt (netbios.rules)
3121 - NETBIOS SMB llsrconnect unicode little endian andx overflow attempt (netbios.rules)
3122 - NETBIOS SMB-DS llsrconnect overflow attempt (netbios.rules)
3123 - NETBIOS SMB-DS llsrconnect little endian overflow attempt (netbios.rules)
3124 - NETBIOS SMB-DS llsrconnect unicode overflow attempt (netbios.rules)
3125 - NETBIOS SMB-DS llsrconnect unicode little endian overflow attempt (netbios.rules)
3126 - NETBIOS SMB-DS llsrconnect andx overflow attempt (netbios.rules)
3127 - NETBIOS SMB-DS llsrconnect little endian andx overflow attempt (netbios.rules)
3128 - NETBIOS SMB-DS llsrconnect unicode andx overflow attempt (netbios.rules)
3129 - NETBIOS SMB-DS llsrconnect unicode little endian andx overflow attempt (netbios.rules)
3130 - EXPLOIT MSN Messenger png overflow (exploit.rules)
3132 - WEB-CLIENT PNG large image width download attempt (web-client.rules)
3133 - WEB-CLIENT PNG large image height download attempt (web-client.rules)
3134 - WEB-CLIENT PNG large colour depth download attempt (web-client.rules)
3135 - NETBIOS SMB Trans2 QUERY_FILE_INFO attempt (netbios.rules)
3136 - NETBIOS SMB Trans2 QUERY_FILE_INFO andx attempt (netbios.rules)
3137 - NETBIOS SMB-DS Trans2 QUERY_FILE_INFO attempt (netbios.rules)
3138 - NETBIOS SMB-DS Trans2 QUERY_FILE_INFO andx attempt (netbios.rules)
3139 - NETBIOS SMB Trans2 FIND_FIRST2 attempt (netbios.rules)
3140 - NETBIOS SMB Trans2 FIND_FIRST2 andx attempt (netbios.rules)
3141 - NETBIOS SMB-DS Trans2 FIND_FIRST2 attempt (netbios.rules)
3142 - NETBIOS SMB-DS Trans2 FIND_FIRST2 andx attempt (netbios.rules)
3143 - NETBIOS SMB Trans2 FIND_FIRST2 response overflow attempt (netbios.rules)
3144 - NETBIOS SMB Trans2 FIND_FIRST2 response andx overflow attempt (netbios.rules)
3145 - NETBIOS SMB-DS Trans2 FIND_FIRST2 response overflow attempt (netbios.rules)
3146 - NETBIOS SMB-DS Trans2 FIND_FIRST2 response andx overflow attempt (netbios.rules)
3147 - TELNET login buffer overflow attempt (telnet.rules)
3148 - WEB-CLIENT winhelp clsid attempt (web-client.rules)
3150 - WEB-IIS SQLXML content type overflow (web-iis.rules)
3151 - FINGER / execution attempt (finger.rules)
3152 - MS-SQL sa brute force failed login attempt (sql.rules)
3153 - DNS TCP inverse query overflow (dns.rules)
3154 - DNS UDP inverse query overflow (dns.rules)
3155 - BACKDOOR BackOrifice 2000 Inbound Traffic (backdoor.rules)
3156 - NETBIOS DCERPC msqueue bind attempt (netbios.rules)
3157 - NETBIOS DCERPC msqueue little endian bind attempt (netbios.rules)
3159 - NETBIOS DCERPC CoGetInstanceFromFile overflow attempt (netbios.rules)
3160 - NETBIOS SMB msqueue bind attempt (netbios.rules)
3161 - NETBIOS SMB msqueue little endian bind attempt (netbios.rules)
3162 - NETBIOS SMB msqueue unicode bind attempt (netbios.rules)
3163 - NETBIOS SMB msqueue unicode little endian bind attempt (netbios.rules)
3164 - NETBIOS SMB msqueue andx bind attempt (netbios.rules)
3165 - NETBIOS SMB msqueue little endian andx bind attempt (netbios.rules)
3166 - NETBIOS SMB msqueue unicode andx bind attempt (netbios.rules)
3167 - NETBIOS SMB msqueue unicode little endian andx bind attempt (netbios.rules)
3168 - NETBIOS SMB-DS msqueue bind attempt (netbios.rules)
3169 - NETBIOS SMB-DS msqueue little endian bind attempt (netbios.rules)
3170 - NETBIOS SMB-DS msqueue unicode bind attempt (netbios.rules)
3171 - NETBIOS SMB-DS msqueue unicode little endian bind attempt (netbios.rules)
3172 - NETBIOS SMB-DS msqueue andx bind attempt (netbios.rules)
3173 - NETBIOS SMB-DS msqueue little endian andx bind attempt (netbios.rules)
3174 - NETBIOS SMB-DS msqueue unicode andx bind attempt (netbios.rules)
3175 - NETBIOS SMB-DS msqueue unicode little endian andx bind attempt (netbios.rules)
3176 - NETBIOS SMB CoGetInstanceFromFile overflow attempt (netbios.rules)
3177 - NETBIOS SMB CoGetInstanceFromFile little endian overflow attempt (netbios.rules)
3178 - NETBIOS SMB CoGetInstanceFromFile unicode overflow attempt (netbios.rules)
3179 - NETBIOS SMB CoGetInstanceFromFile unicode little endian overflow attempt (netbios.rules)
3180 - NETBIOS SMB CoGetInstanceFromFile andx overflow attempt (netbios.rules)
3181 - NETBIOS SMB CoGetInstanceFromFile little endian andx overflow attempt (netbios.rules)
3182 - NETBIOS SMB CoGetInstanceFromFile unicode andx overflow attempt (netbios.rules)
3183 - NETBIOS SMB CoGetInstanceFromFile unicode little endian andx overflow attempt (netbios.rules)
3184 - NETBIOS SMB-DS CoGetInstanceFromFile overflow attempt (netbios.rules)
3185 - NETBIOS SMB-DS CoGetInstanceFromFile little endian overflow attempt (netbios.rules)
3186 - NETBIOS SMB-DS CoGetInstanceFromFile unicode overflow attempt (netbios.rules)
3187 - NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian overflow attempt (netbios.rules)
3188 - NETBIOS SMB-DS CoGetInstanceFromFile andx overflow attempt (netbios.rules)
3189 - NETBIOS SMB-DS CoGetInstanceFromFile little endian andx overflow attempt (netbios.rules)
3190 - NETBIOS SMB-DS CoGetInstanceFromFile unicode andx overflow attempt (netbios.rules)
3191 - NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian andx overflow attempt (netbios.rules)
3193 - WEB-IIS .cmd executable file parsing attack (web-iis.rules)
3194 - WEB-IIS .bat executable file parsing attack (web-iis.rules)
3195 - NETBIOS name query overflow attempt TCP (netbios.rules)
3196 - NETBIOS name query overflow attempt UDP (netbios.rules)
3197 - NETBIOS DCERPC ISystemActivator path overflow attempt little endian (netbios.rules)
3199 - EXPLOIT WINS name query overflow attempt TCP (exploit.rules)
3200 - EXPLOIT WINS name query overflow attempt UDP (exploit.rules)
3201 - WEB-IIS httpodbc.dll access - nimda (web-iis.rules)
3202 - NETBIOS SMB winreg bind attempt (netbios.rules)
3203 - NETBIOS SMB winreg little endian bind attempt (netbios.rules)
3204 - NETBIOS SMB winreg unicode bind attempt (netbios.rules)
3205 - NETBIOS SMB winreg unicode little endian bind attempt (netbios.rules)
3206 - NETBIOS SMB winreg andx bind attempt (netbios.rules)
3207 - NETBIOS SMB winreg little endian andx bind attempt (netbios.rules)
3208 - NETBIOS SMB winreg unicode andx bind attempt (netbios.rules)
3209 - NETBIOS SMB winreg unicode little endian andx bind attempt (netbios.rules)
3210 - NETBIOS SMB-DS winreg bind attempt (netbios.rules)
3211 - NETBIOS SMB-DS winreg little endian bind attempt (netbios.rules)
3212 - NETBIOS SMB-DS winreg unicode bind attempt (netbios.rules)
3213 - NETBIOS SMB-DS winreg unicode little endian bind attempt (netbios.rules)
3214 - NETBIOS SMB-DS winreg andx bind attempt (netbios.rules)
3215 - NETBIOS SMB-DS winreg little endian andx bind attempt (netbios.rules)
3216 - NETBIOS SMB-DS winreg unicode andx bind attempt (netbios.rules)
3217 - NETBIOS SMB-DS winreg unicode little endian andx bind attempt (netbios.rules)
3218 - NETBIOS SMB OpenKey overflow attempt (netbios.rules)
3219 - NETBIOS SMB OpenKey little endian overflow attempt (netbios.rules)
3220 - NETBIOS SMB OpenKey unicode overflow attempt (netbios.rules)
3221 - NETBIOS SMB OpenKey unicode little endian overflow attempt (netbios.rules)
3222 - NETBIOS SMB OpenKey andx overflow attempt (netbios.rules)
3223 - NETBIOS SMB OpenKey little endian andx overflow attempt (netbios.rules)
3224 - NETBIOS SMB OpenKey unicode andx overflow attempt (netbios.rules)
3225 - NETBIOS SMB OpenKey unicode little endian andx overflow attempt (netbios.rules)
3226 - NETBIOS SMB-DS OpenKey overflow attempt (netbios.rules)
3227 - NETBIOS SMB-DS OpenKey little endian overflow attempt (netbios.rules)
3228 - NETBIOS SMB-DS OpenKey unicode overflow attempt (netbios.rules)
3229 - NETBIOS SMB-DS OpenKey unicode little endian overflow attempt (netbios.rules)
3230 - NETBIOS SMB-DS OpenKey andx overflow attempt (netbios.rules)
3231 - NETBIOS SMB-DS OpenKey little endian andx overflow attempt (netbios.rules)
3232 - NETBIOS SMB-DS OpenKey unicode andx overflow attempt (netbios.rules)
3233 - NETBIOS SMB-DS OpenKey unicode little endian andx overflow attempt (netbios.rules)
3234 - NETBIOS Messenger message little endian overflow attempt (netbios.rules)
3235 - NETBIOS Messenger message overflow attempt (netbios.rules)
3236 - NETBIOS DCERPC irot bind attempt (netbios.rules)
3237 - NETBIOS DCERPC irot little endian bind attempt (netbios.rules)
3238 - NETBIOS DCERPC IrotIsRunning attempt (netbios.rules)
3239 - NETBIOS DCERPC IrotIsRunning little endian attempt (netbios.rules)
3240 - NETBIOS SMB irot bind attempt (netbios.rules)
3241 - NETBIOS SMB irot little endian bind attempt (netbios.rules)
3242 - NETBIOS SMB irot unicode bind attempt (netbios.rules)
3243 - NETBIOS SMB irot unicode little endian bind attempt (netbios.rules)
3244 - NETBIOS SMB irot andx bind attempt (netbios.rules)
3245 - NETBIOS SMB irot little endian andx bind attempt (netbios.rules)
3246 - NETBIOS SMB irot unicode andx bind attempt (netbios.rules)
3247 - NETBIOS SMB irot unicode little endian andx bind attempt (netbios.rules)
3248 - NETBIOS SMB-DS irot bind attempt (netbios.rules)
3249 - NETBIOS SMB-DS irot little endian bind attempt (netbios.rules)
3250 - NETBIOS SMB-DS irot unicode bind attempt (netbios.rules)
3251 - NETBIOS SMB-DS irot unicode little endian bind attempt (netbios.rules)
3252 - NETBIOS SMB-DS irot andx bind attempt (netbios.rules)
3253 - NETBIOS SMB-DS irot little endian andx bind attempt (netbios.rules)
3254 - NETBIOS SMB-DS irot unicode andx bind attempt (netbios.rules)
3255 - NETBIOS SMB-DS irot unicode little endian andx bind attempt (netbios.rules)
3256 - NETBIOS SMB IrotIsRunning attempt (netbios.rules)
3257 - NETBIOS SMB IrotIsRunning little endian attempt (netbios.rules)
3258 - NETBIOS SMB IrotIsRunning unicode attempt (netbios.rules)
3259 - NETBIOS SMB IrotIsRunning unicode little endian attempt (netbios.rules)
3260 - NETBIOS SMB IrotIsRunning andx attempt (netbios.rules)
3261 - NETBIOS SMB IrotIsRunning little endian andx attempt (netbios.rules)
3262 - NETBIOS SMB IrotIsRunning unicode andx attempt (netbios.rules)
3263 - NETBIOS SMB IrotIsRunning unicode little endian andx attempt (netbios.rules)
3264 - NETBIOS SMB-DS IrotIsRunning attempt (netbios.rules)
3265 - NETBIOS SMB-DS IrotIsRunning little endian attempt (netbios.rules)
3266 - NETBIOS SMB-DS IrotIsRunning unicode attempt (netbios.rules)
3267 - NETBIOS SMB-DS IrotIsRunning unicode little endian attempt (netbios.rules)
3268 - NETBIOS SMB-DS IrotIsRunning andx attempt (netbios.rules)
3269 - NETBIOS SMB-DS IrotIsRunning little endian andx attempt (netbios.rules)
3270 - NETBIOS SMB-DS IrotIsRunning unicode andx attempt (netbios.rules)
3271 - NETBIOS SMB-DS IrotIsRunning unicode little endian andx attempt (netbios.rules)
3272 - BACKDOOR mydoom.a backdoor upload/execute attempt (backdoor.rules)
3273 - MS-SQL sa brute force failed login unicode attempt (sql.rules)
3274 - TELNET login buffer non-evasive overflow attempt (telnet.rules)
3275 - NETBIOS DCERPC IActivation bind attempt (netbios.rules)
3276 - NETBIOS DCERPC IActivation little endian bind attempt (netbios.rules)
3377 - NETBIOS SMB IActivation bind attempt (netbios.rules)
3378 - NETBIOS SMB IActivation little endian bind attempt (netbios.rules)
3379 - NETBIOS SMB IActivation unicode bind attempt (netbios.rules)
3380 - NETBIOS SMB IActivation unicode little endian bind attempt (netbios.rules)
3381 - NETBIOS SMB IActivation andx bind attempt (netbios.rules)
3382 - NETBIOS SMB IActivation little endian andx bind attempt (netbios.rules)
3383 - NETBIOS SMB IActivation unicode andx bind attempt (netbios.rules)
3384 - NETBIOS SMB IActivation unicode little endian andx bind attempt (netbios.rules)
3385 - NETBIOS SMB-DS IActivation bind attempt (netbios.rules)
3386 - NETBIOS SMB-DS IActivation little endian bind attempt (netbios.rules)
3387 - NETBIOS SMB-DS IActivation unicode bind attempt (netbios.rules)
3388 - NETBIOS SMB-DS IActivation unicode little endian bind attempt (netbios.rules)
3389 - NETBIOS SMB-DS IActivation andx bind attempt (netbios.rules)
3390 - NETBIOS SMB-DS IActivation little endian andx bind attempt (netbios.rules)
3391 - NETBIOS SMB-DS IActivation unicode andx bind attempt (netbios.rules)
3392 - NETBIOS SMB-DS IActivation unicode little endian andx bind attempt (netbios.rules)
3393 - NETBIOS SMB ISystemActivator bind attempt (netbios.rules)
3394 - NETBIOS SMB ISystemActivator little endian bind attempt (netbios.rules)
3395 - NETBIOS SMB ISystemActivator unicode bind attempt (netbios.rules)
3396 - NETBIOS SMB ISystemActivator unicode little endian bind attempt (netbios.rules)
3397 - NETBIOS SMB ISystemActivator andx bind attempt (netbios.rules)
3398 - NETBIOS SMB ISystemActivator little endian andx bind attempt (netbios.rules)
3399 - NETBIOS SMB ISystemActivator unicode andx bind attempt (netbios.rules)
3400 - NETBIOS SMB ISystemActivator unicode little endian andx bind attempt (netbios.rules)
3401 - NETBIOS SMB-DS ISystemActivator bind attempt (netbios.rules)
3402 - NETBIOS SMB-DS ISystemActivator little endian bind attempt (netbios.rules)
3403 - NETBIOS SMB-DS ISystemActivator unicode bind attempt (netbios.rules)
3404 - NETBIOS SMB-DS ISystemActivator unicode little endian bind attempt (netbios.rules)
3405 - NETBIOS SMB-DS ISystemActivator andx bind attempt (netbios.rules)
3406 - NETBIOS SMB-DS ISystemActivator little endian andx bind attempt (netbios.rules)
3407 - NETBIOS SMB-DS ISystemActivator unicode andx bind attempt (netbios.rules)
3408 - NETBIOS SMB-DS ISystemActivator unicode little endian andx bind attempt (netbios.rules)
3409 - NETBIOS SMB RemoteActivation attempt (netbios.rules)
3410 - NETBIOS SMB RemoteActivation little endian attempt (netbios.rules)
3411 - NETBIOS SMB RemoteActivation unicode attempt (netbios.rules)
3412 - NETBIOS SMB RemoteActivation unicode little endian attempt (netbios.rules)
3413 - NETBIOS SMB RemoteActivation andx attempt (netbios.rules)
3414 - NETBIOS SMB RemoteActivation little endian andx attempt (netbios.rules)
3415 - NETBIOS SMB RemoteActivation unicode andx attempt (netbios.rules)
3416 - NETBIOS SMB RemoteActivation unicode little endian andx attempt (netbios.rules)
3417 - NETBIOS SMB-DS RemoteActivation attempt (netbios.rules)
3418 - NETBIOS SMB-DS RemoteActivation little endian attempt (netbios.rules)
3419 - NETBIOS SMB-DS RemoteActivation unicode attempt (netbios.rules)
3420 - NETBIOS SMB-DS RemoteActivation unicode little endian attempt (netbios.rules)
3421 - NETBIOS SMB-DS RemoteActivation andx attempt (netbios.rules)
3422 - NETBIOS SMB-DS RemoteActivation little endian andx attempt (netbios.rules)
3423 - NETBIOS SMB-DS RemoteActivation unicode andx attempt (netbios.rules)
3424 - NETBIOS SMB-DS RemoteActivation unicode little endian andx attempt (netbios.rules)
3425 - NETBIOS SMB CoGetInstanceFromFile attempt (netbios.rules)
3426 - NETBIOS SMB CoGetInstanceFromFile little endian attempt (netbios.rules)
3427 - NETBIOS SMB CoGetInstanceFromFile unicode attempt (netbios.rules)
3428 - NETBIOS SMB CoGetInstanceFromFile unicode little endian attempt (netbios.rules)
3429 - NETBIOS SMB CoGetInstanceFromFile andx attempt (netbios.rules)
3430 - NETBIOS SMB CoGetInstanceFromFile little endian andx attempt (netbios.rules)
3431 - NETBIOS SMB CoGetInstanceFromFile unicode andx attempt (netbios.rules)
3432 - NETBIOS SMB CoGetInstanceFromFile unicode little endian andx attempt (netbios.rules)
3433 - NETBIOS SMB-DS CoGetInstanceFromFile attempt (netbios.rules)
3434 - NETBIOS SMB-DS CoGetInstanceFromFile little endian attempt (netbios.rules)
3435 - NETBIOS SMB-DS CoGetInstanceFromFile unicode attempt (netbios.rules)
3436 - NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian attempt (netbios.rules)
3437 - NETBIOS SMB-DS CoGetInstanceFromFile andx attempt (netbios.rules)
3438 - NETBIOS SMB-DS CoGetInstanceFromFile little endian andx attempt (netbios.rules)
3439 - NETBIOS SMB-DS CoGetInstanceFromFile unicode andx attempt (netbios.rules)
3440 - NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian andx attempt (netbios.rules)
3442 - DOS WIN32 TCP print service denial of service attempt (dos.rules)
3443 - MS-SQL DNS query with 1 requests (sql.rules)
3444 - MS-SQL DNS query with 2 requests (sql.rules)
3445 - MS-SQL DNS query with 3 requests (sql.rules)
3446 - MS-SQL DNS query with 4 requests (sql.rules)
3447 - MS-SQL DNS query with 5 requests (sql.rules)
3448 - MS-SQL DNS query with 6 requests (sql.rules)
3449 - MS-SQL DNS query with 7 requests (sql.rules)
3450 - MS-SQL DNS query with 8 requests (sql.rules)
3451 - MS-SQL DNS query with 9 requests (sql.rules)
3452 - MS-SQL DNS query with 10 requests (sql.rules)
3455 - EXPLOIT Bontago Game Server Nickname Buffer Overflow (exploit.rules)
3456 - MYSQL 4.0 root login attempt (mysql.rules)
3457 - EXPLOIT Arkeia backup client type 77 overflow attempt (exploit.rules)
3458 - EXPLOIT Arkeia backup client type 84 overflow attempt (exploit.rules)
3459 - P2P Manolito Search Query (p2p.rules)
3466 - WEB-MISC Authorization Basic overflow attempt (web-misc.rules)
3469 - WEB-CGI Ipswitch WhatsUp Gold dos attempt (web-cgi.rules)
3471 - WEB-CLIENT iTunes playlist URL overflow attempt (web-client.rules)
3472 - EXPLOIT ARCserve discovery service overflow (exploit.rules)
3473 - WEB-CLIENT RealPlayer SMIL file overflow attempt (web-client.rules)
3474 - EXPLOIT ARCserve backup TCP slot info msg client name overflow (exploit.rules)
3475 - EXPLOIT ARCserve backup TCP slot info msg client domain overflow (exploit.rules)
3476 - EXPLOIT ARCserve backup TCP product info msg 0x9b client domain overflow (exploit.rules)
3477 - EXPLOIT ARCserve backup TCP product info msg 0x9b client name overflow (exploit.rules)
3478 - EXPLOIT ARCserve backup TCP product info msg 0x9c client domain overflow (exploit.rules)
3479 - EXPLOIT ARCserve backup TCP product info msg 0x9c client name overflow (exploit.rules)
3480 - EXPLOIT ARCserve backup UDP slot info msg client name overflow (exploit.rules)
3481 - EXPLOIT ARCserve backup UDP slot info msg client domain overflow (exploit.rules)
3482 - EXPLOIT ARCserve backup UDP product info msg 0x9b client name overflow (exploit.rules)
3483 - EXPLOIT ARCserve backup UDP product info msg 0x9b client domain overflow (exploit.rules)
3484 - EXPLOIT ARCserve backup UDP product info msg 0x9c client name overflow (exploit.rules)
3485 - EXPLOIT ARCserve backup UDP product info msg 0x9c client domain overflow (exploit.rules)
3517 - EXPLOIT Computer Associates license PUTOLF overflow attempt (exploit.rules)
3518 - WEB-MISC MySQL MaxDB WebSQL wppassword buffer overflow (web-misc.rules)
3519 - WEB-MISC MySQL MaxDB WebSQL wppassword buffer overflow default port (web-misc.rules)
3520 - EXPLOIT Computer Associates license GCR NETWORK overflow attempt (exploit.rules)
3521 - EXPLOIT Computer Associates license GCR CHECKSUMS overflow attempt (exploit.rules)
3522 - EXPLOIT Computer Associates license GETCONFIG server overflow attempt (exploit.rules)
3523 - FTP SITE INDEX format string attempt (ftp.rules)
3524 - EXPLOIT Computer Associates license invalid GCR CHECKSUMS attempt (exploit.rules)
3525 - EXPLOIT Computer Associates license invalid GCR NETWORK attempt (exploit.rules)
3526 - ORACLE XDB FTP UNLOCK overflow attempt (oracle.rules)
3527 - EXPLOIT Solaris LPD overflow attempt (exploit.rules)
3528 - MYSQL CREATE FUNCTION attempt (mysql.rules)
3529 - EXPLOIT Computer Associates license GETCONFIG client overflow attempt (exploit.rules)
3530 - EXPLOIT ARCserve backup UDP msg 0x99 client name overflow (exploit.rules)
3531 - EXPLOIT ARCserve backup UDP msg 0x99 client domain overflow (exploit.rules)
3533 - TELNET client LINEMODE SLC overflow attempt (telnet.rules)
3534 - WEB-CLIENT Mozilla GIF heap overflow (web-client.rules)
3536 - WEB-CLIENT Mozilla GIF multipacket heap overflow (web-client.rules)
3537 - TELNET client ENV OPT escape overflow attempt (telnet.rules)
3538 - EXPLOIT RADIUS registration MSID overflow attempt (exploit.rules)
3539 - EXPLOIT RADIUS MSID overflow attempt (exploit.rules)
3540 - EXPLOIT RADIUS registration vendor ATTR_TYPE_STR overflow attempt (exploit.rules)
3541 - EXPLOIT RADIUS ATTR_TYPE_STR overflow attempt (exploit.rules)
3542 - MS-SQL SA brute force login attempt (sql.rules)
3543 - MS-SQL SA brute force login attempt TDS v7/8 (sql.rules)
3544 - WEB-MISC TrackerCam ComGetLogFile.php3 directory traversal attempt (web-misc.rules)
3545 - WEB-MISC TrackerCam ComGetLogFile.php3 log information disclosure (web-misc.rules)
3546 - WEB-MISC TrackerCam User-Agent buffer overflow attempt (web-misc.rules)
3547 - WEB-MISC TrackerCam overly long php parameter overflow attempt (web-misc.rules)
3548 - WEB-MISC TrackerCam negative Content-Length attempt (web-misc.rules)
3550 - WEB-CLIENT HTML http scheme hostname overflow attempt (web-client.rules)
3552 - WEB-CLIENT OLE32 MSHTA masquerade attempt (web-client.rules)
3554 - NETBIOS DCERPC-DIRECT mqqm bind attempt (netbios.rules)
3555 - NETBIOS DCERPC-DIRECT mqqm little endian bind attempt (netbios.rules)
3556 - NETBIOS DCERPC mqqm bind attempt (netbios.rules)
3557 - NETBIOS DCERPC mqqm little endian bind attempt (netbios.rules)
3558 - NETBIOS SMB mqqm WriteAndX andx bind attempt (netbios.rules)
3559 - NETBIOS SMB mqqm WriteAndX bind attempt (netbios.rules)
3560 - NETBIOS SMB mqqm WriteAndX little endian andx bind attempt (netbios.rules)
3561 - NETBIOS SMB mqqm WriteAndX little endian bind attempt (netbios.rules)
3562 - NETBIOS SMB mqqm WriteAndX unicode andx bind attempt (netbios.rules)
3563 - NETBIOS SMB mqqm WriteAndX unicode bind attempt (netbios.rules)
3564 - NETBIOS SMB mqqm WriteAndX unicode little endian andx bind attempt (netbios.rules)
3565 - NETBIOS SMB mqqm WriteAndX unicode little endian bind attempt (netbios.rules)
3566 - NETBIOS SMB mqqm andx bind attempt (netbios.rules)
3567 - NETBIOS SMB mqqm bind attempt (netbios.rules)
3568 - NETBIOS SMB mqqm little endian andx bind attempt (netbios.rules)
3569 - NETBIOS SMB mqqm little endian bind attempt (netbios.rules)
3570 - NETBIOS SMB mqqm unicode andx bind attempt (netbios.rules)
3571 - NETBIOS SMB mqqm unicode bind attempt (netbios.rules)
3572 - NETBIOS SMB mqqm unicode little endian andx bind attempt (netbios.rules)
3573 - NETBIOS SMB mqqm unicode little endian bind attempt (netbios.rules)
3574 - NETBIOS SMB-DS mqqm WriteAndX andx bind attempt (netbios.rules)
3575 - NETBIOS SMB-DS mqqm WriteAndX bind attempt (netbios.rules)
3576 - NETBIOS SMB-DS mqqm WriteAndX little endian andx bind attempt (netbios.rules)
3577 - NETBIOS SMB-DS mqqm WriteAndX little endian bind attempt (netbios.rules)
3578 - NETBIOS SMB-DS mqqm WriteAndX unicode andx bind attempt (netbios.rules)
3579 - NETBIOS SMB-DS mqqm WriteAndX unicode bind attempt (netbios.rules)
3580 - NETBIOS SMB-DS mqqm WriteAndX unicode little endian andx bind attempt (netbios.rules)
3581 - NETBIOS SMB-DS mqqm WriteAndX unicode little endian bind attempt (netbios.rules)
3582 - NETBIOS SMB-DS mqqm andx bind attempt (netbios.rules)
3583 - NETBIOS SMB-DS mqqm bind attempt (netbios.rules)
3584 - NETBIOS SMB-DS mqqm little endian andx bind attempt (netbios.rules)
3585 - NETBIOS SMB-DS mqqm little endian bind attempt (netbios.rules)
3586 - NETBIOS SMB-DS mqqm unicode andx bind attempt (netbios.rules)
3587 - NETBIOS SMB-DS mqqm unicode bind attempt (netbios.rules)
3588 - NETBIOS SMB-DS mqqm unicode little endian andx bind attempt (netbios.rules)
3589 - NETBIOS SMB-DS mqqm unicode little endian bind attempt (netbios.rules)
3590 - NETBIOS DCERPC-DIRECT mqqm QMDeleteObject little endian overflow attempt (netbios.rules)
3591 - NETBIOS DCERPC-DIRECT mqqm QMDeleteObject overflow attempt (netbios.rules)
3592 - NETBIOS DCERPC mqqm QMDeleteObject little endian overflow attempt (netbios.rules)
3593 - NETBIOS DCERPC mqqm QMDeleteObject overflow attempt (netbios.rules)
3594 - NETBIOS SMB mqqm QMDeleteObject WriteAndX andx overflow attempt (netbios.rules)
3595 - NETBIOS SMB mqqm QMDeleteObject WriteAndX little endian andx overflow attempt (netbios.rules)
3596 - NETBIOS SMB mqqm QMDeleteObject WriteAndX little endian overflow attempt (netbios.rules)
3597 - NETBIOS SMB mqqm QMDeleteObject WriteAndX overflow attempt (netbios.rules)
3598 - NETBIOS SMB mqqm QMDeleteObject WriteAndX unicode andx overflow attempt (netbios.rules)
3599 - NETBIOS SMB mqqm QMDeleteObject WriteAndX unicode little endian andx overflow attempt (netbios.rules)
3600 - NETBIOS SMB mqqm QMDeleteObject WriteAndX unicode little endian overflow attempt (netbios.rules)
3601 - NETBIOS SMB mqqm QMDeleteObject WriteAndX unicode overflow attempt (netbios.rules)
3602 - NETBIOS SMB mqqm QMDeleteObject andx overflow attempt (netbios.rules)
3603 - NETBIOS SMB mqqm QMDeleteObject little endian andx overflow attempt (netbios.rules)
3604 - NETBIOS SMB mqqm QMDeleteObject little endian overflow attempt (netbios.rules)
3605 - NETBIOS SMB mqqm QMDeleteObject overflow attempt (netbios.rules)
3606 - NETBIOS SMB mqqm QMDeleteObject unicode andx overflow attempt (netbios.rules)
3607 - NETBIOS SMB mqqm QMDeleteObject unicode little endian andx overflow attempt (netbios.rules)
3608 - NETBIOS SMB mqqm QMDeleteObject unicode little endian overflow attempt (netbios.rules)
3609 - NETBIOS SMB mqqm QMDeleteObject unicode overflow attempt (netbios.rules)
3610 - NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX andx overflow attempt (netbios.rules)
3611 - NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX little endian andx overflow attempt (netbios.rules)
3612 - NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX little endian overflow attempt (netbios.rules)
3613 - NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX overflow attempt (netbios.rules)
3614 - NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX unicode andx overflow attempt (netbios.rules)
3615 - NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX unicode little endian andx overflow attempt (netbios.rules)
3616 - NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX unicode little endian overflow attempt (netbios.rules)
3617 - NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX unicode overflow attempt (netbios.rules)
3618 - NETBIOS SMB-DS mqqm QMDeleteObject andx overflow attempt (netbios.rules)
3619 - NETBIOS SMB-DS mqqm QMDeleteObject little endian andx overflow attempt (netbios.rules)
3620 - NETBIOS SMB-DS mqqm QMDeleteObject little endian overflow attempt (netbios.rules)
3621 - NETBIOS SMB-DS mqqm QMDeleteObject overflow attempt (netbios.rules)
3622 - NETBIOS SMB-DS mqqm QMDeleteObject unicode andx overflow attempt (netbios.rules)
3623 - NETBIOS SMB-DS mqqm QMDeleteObject unicode little endian andx overflow attempt (netbios.rules)
3624 - NETBIOS SMB-DS mqqm QMDeleteObject unicode little endian overflow attempt (netbios.rules)
3625 - NETBIOS SMB-DS mqqm QMDeleteObject unicode overflow attempt (netbios.rules)
3632 - WEB-CLIENT Mozilla bitmap width integer overflow attempt (web-client.rules)
3634 - WEB-CLIENT Mozilla bitmap width integer overflow multipacket attempt (web-client.rules)
3635 - BACKDOOR Amanda 2.0 connection established (backdoor.rules)
3637 - EXPLOIT Computer Associates license PUTOLF directory traversal attempt (exploit.rules)
3651 - EXPLOIT CVS rsh annotate revision overflow attempt (exploit.rules)
3652 - EXPLOIT CVS pserver annotate revision overflow attempt (exploit.rules)
3657 - ORACLE ctxsys.driload attempt (oracle.rules)
3658 - EXPLOIT ARCserve backup universal agent option 1000 little endian buffer overflow attempt (exploit.rules)
3659 - EXPLOIT ARCserve backup universal agent option 1000 buffer overflow attempt (exploit.rules)
3660 - EXPLOIT ARCserve backup universal agent option 00 little endian buffer overflow attempt (exploit.rules)
3661 - EXPLOIT ARCserve backup universal agent option 00 buffer overflow attempt (exploit.rules)
3662 - EXPLOIT ARCserve backup universal agent option 03 little endian buffer overflow attempt (exploit.rules)
3663 - EXPLOIT ARCserve backup universal agent option 03 buffer overflow attempt (exploit.rules)
3664 - EXPLOIT PPTP echo request buffer overflow attempt (exploit.rules)