Sourcefire VRT Update
Date: 2006-01-27
This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack.
The format of the file is:
sid - Message (rule group)
New rules: 5325 - NETBIOS DCERPC NCACN-IP-TCP v4 irot IrotRevoke overflow attempt (netbios.rules) 5326 - NETBIOS DCERPC NCADG-IP-UDP v4 irot IrotRevoke overflow attempt (netbios.rules) 5327 - NETBIOS DCERPC NCADG-IP-UDP v4 irot IrotRevoke little endian overflow attempt (netbios.rules) 5328 - NETBIOS DCERPC NCACN-IP-TCP v4 irot IrotRevoke little endian overflow attempt (netbios.rules) 5329 - NETBIOS DCERPC NCACN-IP-TCP irot IrotRevoke overflow attempt (netbios.rules) 5330 - NETBIOS DCERPC NCADG-IP-UDP irot IrotRevoke overflow attempt (netbios.rules) 5331 - NETBIOS DCERPC NCADG-IP-UDP irot IrotRevoke little endian overflow attempt (netbios.rules) 5332 - NETBIOS DCERPC NCACN-IP-TCP irot IrotRevoke little endian overflow attempt (netbios.rules) 5333 - NETBIOS SMB llsrpc2 alter context attempt (netbios.rules) 5334 - NETBIOS SMB llsrpc2 unicode alter context attempt (netbios.rules) 5335 - NETBIOS SMB llsrpc2 WriteAndX alter context attempt (netbios.rules) 5336 - NETBIOS SMB llsrpc2 WriteAndX unicode alter context attempt (netbios.rules) 5337 - NETBIOS SMB-DS llsrpc2 alter context attempt (netbios.rules) 5338 - NETBIOS SMB-DS llsrpc2 WriteAndX alter context attempt (netbios.rules) 5339 - NETBIOS SMB-DS llsrpc2 unicode alter context attempt (netbios.rules) 5340 - NETBIOS SMB-DS llsrpc2 WriteAndX unicode alter context attempt (netbios.rules) 5341 - NETBIOS SMB llsrpc2 little endian alter context attempt (netbios.rules) 5342 - NETBIOS SMB llsrpc2 WriteAndX little endian alter context attempt (netbios.rules) 5343 - NETBIOS SMB llsrpc2 unicode little endian alter context attempt (netbios.rules) 5344 - NETBIOS SMB llsrpc2 WriteAndX unicode little endian alter context attempt (netbios.rules) 5345 - NETBIOS SMB-DS llsrpc2 little endian alter context attempt (netbios.rules) 5346 - NETBIOS SMB-DS llsrpc2 WriteAndX little endian alter context attempt (netbios.rules) 5347 - NETBIOS SMB-DS llsrpc2 unicode little endian alter context attempt (netbios.rules) 5348 - NETBIOS SMB-DS llsrpc2 WriteAndX unicode little endian alter context attempt (netbios.rules) 5349 - NETBIOS SMB llsrpc2 bind attempt (netbios.rules) 5350 - NETBIOS SMB llsrpc2 unicode bind attempt (netbios.rules) 5351 - NETBIOS SMB llsrpc2 WriteAndX bind attempt (netbios.rules) 5352 - NETBIOS SMB llsrpc2 WriteAndX unicode bind attempt (netbios.rules) 5353 - NETBIOS SMB-DS llsrpc2 bind attempt (netbios.rules) 5354 - NETBIOS SMB-DS llsrpc2 WriteAndX bind attempt (netbios.rules) 5355 - NETBIOS SMB-DS llsrpc2 unicode bind attempt (netbios.rules) 5356 - NETBIOS SMB-DS llsrpc2 WriteAndX unicode bind attempt (netbios.rules) 5357 - NETBIOS SMB llsrpc2 little endian bind attempt (netbios.rules) 5358 - NETBIOS SMB llsrpc2 WriteAndX little endian bind attempt (netbios.rules) 5359 - NETBIOS SMB llsrpc2 unicode little endian bind attempt (netbios.rules) 5360 - NETBIOS SMB llsrpc2 WriteAndX unicode little endian bind attempt (netbios.rules) 5361 - NETBIOS SMB-DS llsrpc2 little endian bind attempt (netbios.rules) 5362 - NETBIOS SMB-DS llsrpc2 WriteAndX little endian bind attempt (netbios.rules) 5363 - NETBIOS SMB-DS llsrpc2 unicode little endian bind attempt (netbios.rules) 5364 - NETBIOS SMB-DS llsrpc2 WriteAndX unicode little endian bind attempt (netbios.rules) 5365 - NETBIOS SMB llsrpc2 andx alter context attempt (netbios.rules) 5366 - NETBIOS SMB llsrpc2 unicode andx alter context attempt (netbios.rules) 5367 - NETBIOS SMB llsrpc2 WriteAndX andx alter context attempt (netbios.rules) 5368 - NETBIOS SMB llsrpc2 WriteAndX unicode andx alter context attempt (netbios.rules) 5369 - NETBIOS SMB-DS llsrpc2 andx alter context attempt (netbios.rules) 5370 - NETBIOS SMB-DS llsrpc2 WriteAndX andx alter context attempt (netbios.rules) 5371 - NETBIOS SMB-DS llsrpc2 unicode andx alter context attempt (netbios.rules) 5372 - NETBIOS SMB-DS llsrpc2 WriteAndX unicode andx alter context attempt (netbios.rules) 5373 - NETBIOS SMB llsrpc2 little endian andx alter context attempt (netbios.rules) 5374 - NETBIOS SMB llsrpc2 WriteAndX little endian andx alter context attempt (netbios.rules) 5375 - NETBIOS SMB llsrpc2 unicode little endian andx alter context attempt (netbios.rules) 5376 - NETBIOS SMB llsrpc2 WriteAndX unicode little endian andx alter context attempt (netbios.rules) 5377 - NETBIOS SMB-DS llsrpc2 little endian andx alter context attempt (netbios.rules) 5378 - NETBIOS SMB-DS llsrpc2 WriteAndX little endian andx alter context attempt (netbios.rules) 5379 - NETBIOS SMB-DS llsrpc2 unicode little endian andx alter context attempt (netbios.rules) 5380 - NETBIOS SMB-DS llsrpc2 WriteAndX unicode little endian andx alter context attempt (netbios.rules) 5381 - NETBIOS SMB llsrpc2 andx bind attempt (netbios.rules) 5382 - NETBIOS SMB llsrpc2 unicode andx bind attempt (netbios.rules) 5383 - NETBIOS SMB llsrpc2 WriteAndX andx bind attempt (netbios.rules) 5384 - NETBIOS SMB llsrpc2 WriteAndX unicode andx bind attempt (netbios.rules) 5385 - NETBIOS SMB-DS llsrpc2 andx bind attempt (netbios.rules) 5386 - NETBIOS SMB-DS llsrpc2 WriteAndX andx bind attempt (netbios.rules) 5387 - NETBIOS SMB-DS llsrpc2 unicode andx bind attempt (netbios.rules) 5388 - NETBIOS SMB-DS llsrpc2 WriteAndX unicode andx bind attempt (netbios.rules) 5389 - NETBIOS SMB llsrpc2 little endian andx bind attempt (netbios.rules) 5390 - NETBIOS SMB llsrpc2 WriteAndX little endian andx bind attempt (netbios.rules) 5391 - NETBIOS SMB llsrpc2 unicode little endian andx bind attempt (netbios.rules) 5392 - NETBIOS SMB llsrpc2 WriteAndX unicode little endian andx bind attempt (netbios.rules) 5393 - NETBIOS SMB-DS llsrpc2 little endian andx bind attempt (netbios.rules) 5394 - NETBIOS SMB-DS llsrpc2 WriteAndX little endian andx bind attempt (netbios.rules) 5395 - NETBIOS SMB-DS llsrpc2 unicode little endian andx bind attempt (netbios.rules) 5396 - NETBIOS SMB-DS llsrpc2 WriteAndX unicode little endian andx bind attempt (netbios.rules) 5397 - NETBIOS SMB llsrpc little endian alter context attempt (netbios.rules) 5398 - NETBIOS SMB-DS llsrpc little endian alter context attempt (netbios.rules) 5399 - NETBIOS SMB llsrpc WriteAndX little endian alter context attempt (netbios.rules) 5400 - NETBIOS SMB-DS llsrpc WriteAndX unicode little endian alter context attempt (netbios.rules) 5401 - NETBIOS SMB-DS llsrpc WriteAndX bind attempt (netbios.rules) 5402 - NETBIOS SMB llsrpc bind attempt (netbios.rules) 5403 - NETBIOS SMB llsrpc unicode bind attempt (netbios.rules) 5404 - NETBIOS SMB llsrpc WriteAndX unicode bind attempt (netbios.rules) 5405 - NETBIOS SMB-DS llsrpc little endian andx bind attempt (netbios.rules) 5406 - NETBIOS SMB llsrpc little endian andx bind attempt (netbios.rules) 5407 - NETBIOS SMB-DS llsrpc WriteAndX unicode andx bind attempt (netbios.rules) 5408 - NETBIOS SMB-DS llsrpc WriteAndX unicode little endian andx bind attempt (netbios.rules) 5409 - NETBIOS SMB llsrpc WriteAndX unicode little endian andx bind attempt (netbios.rules) 5410 - NETBIOS SMB llsrpc WriteAndX andx bind attempt (netbios.rules) 5411 - NETBIOS SMB-DS llsrpc WriteAndX little endian andx bind attempt (netbios.rules) 5412 - NETBIOS SMB-DS llsrpc unicode andx alter context attempt (netbios.rules) 5413 - NETBIOS SMB-DS llsrpc unicode little endian andx alter context attempt (netbios.rules) 5414 - NETBIOS SMB-DS llsrpc unicode little endian andx bind attempt (netbios.rules) 5415 - NETBIOS SMB-DS llsrpc andx bind attempt (netbios.rules) 5416 - NETBIOS SMB-DS llsrpc unicode andx bind attempt (netbios.rules) 5417 - NETBIOS SMB llsrpc unicode little endian andx bind attempt (netbios.rules) 5418 - NETBIOS SMB llsrpc WriteAndX little endian andx bind attempt (netbios.rules) 5419 - NETBIOS SMB llsrpc andx alter context attempt (netbios.rules) 5420 - NETBIOS SMB-DS llsrpc WriteAndX andx alter context attempt (netbios.rules) 5421 - NETBIOS SMB llsrpc unicode andx alter context attempt (netbios.rules) 5422 - NETBIOS SMB llsrpc WriteAndX unicode andx alter context attempt (netbios.rules) 5423 - NETBIOS SMB-DS llsrpc andx alter context attempt (netbios.rules) 5424 - NETBIOS SMB llsrpc WriteAndX andx alter context attempt (netbios.rules) 5425 - NETBIOS SMB-DS llsrpc WriteAndX unicode andx alter context attempt (netbios.rules) 5426 - NETBIOS SMB llsrpc WriteAndX unicode little endian andx alter context attempt (netbios.rules) 5427 - NETBIOS SMB-DS llsrpc WriteAndX little endian andx alter context attempt (netbios.rules) 5428 - NETBIOS SMB llsrpc unicode little endian andx alter context attempt (netbios.rules) 5429 - NETBIOS SMB llsrpc little endian andx alter context attempt (netbios.rules) 5430 - NETBIOS SMB-DS llsrpc little endian andx alter context attempt (netbios.rules) 5431 - NETBIOS SMB llsrpc WriteAndX little endian andx alter context attempt (netbios.rules) 5432 - NETBIOS SMB-DS llsrpc WriteAndX unicode little endian andx alter context attempt (netbios.rules) 5433 - NETBIOS SMB-DS llsrpc WriteAndX andx bind attempt (netbios.rules) 5434 - NETBIOS SMB llsrpc andx bind attempt (netbios.rules) 5435 - NETBIOS SMB llsrpc unicode andx bind attempt (netbios.rules) 5436 - NETBIOS SMB llsrpc WriteAndX unicode andx bind attempt (netbios.rules) 5437 - NETBIOS SMB-DS llsrpc LlsrConnect unicode little endian overflow attempt (netbios.rules) 5438 - NETBIOS SMB llsrpc LlsrConnect unicode little endian overflow attempt (netbios.rules) 5439 - NETBIOS SMB llsrpc LlsrConnect WriteAndX unicode overflow attempt (netbios.rules) 5440 - NETBIOS SMB v4 llsrpc LlsrConnect unicode overflow attempt (netbios.rules) 5441 - NETBIOS SMB-DS v4 llsrpc LlsrConnect WriteAndX overflow attempt (netbios.rules) 5442 - NETBIOS SMB-DS v4 llsrpc LlsrConnect unicode overflow attempt (netbios.rules) 5443 - NETBIOS SMB-DS v4 llsrpc LlsrConnect overflow attempt (netbios.rules) 5444 - NETBIOS SMB-DS v4 llsrpc LlsrConnect WriteAndX unicode overflow attempt (netbios.rules) 5445 - NETBIOS SMB v4 llsrpc LlsrConnect WriteAndX unicode overflow attempt (netbios.rules) 5446 - NETBIOS SMB v4 llsrpc LlsrConnect WriteAndX little endian overflow attempt (netbios.rules) 5447 - NETBIOS SMB v4 llsrpc LlsrConnect little endian overflow attempt (netbios.rules) 5448 - NETBIOS SMB v4 llsrpc LlsrConnect unicode little endian overflow attempt (netbios.rules) 5449 - NETBIOS SMB-DS v4 llsrpc LlsrConnect unicode little endian overflow attempt (netbios.rules) 5450 - NETBIOS SMB-DS v4 llsrpc LlsrConnect WriteAndX little endian overflow attempt (netbios.rules) 5451 - NETBIOS SMB-DS v4 llsrpc LlsrConnect WriteAndX unicode little endian overflow attempt (netbios.rules) 5452 - NETBIOS SMB v4 llsrpc LlsrConnect WriteAndX unicode little endian overflow attempt (netbios.rules) 5453 - NETBIOS SMB v4 llsrpc LlsrConnect andx overflow attempt (netbios.rules) 5454 - NETBIOS SMB-DS llsrpc LlsrConnect WriteAndX unicode andx overflow attempt (netbios.rules) 5455 - NETBIOS SMB-DS llsrpc LlsrConnect WriteAndX little endian andx overflow attempt (netbios.rules) 5456 - NETBIOS SMB llsrpc LlsrConnect WriteAndX little endian andx overflow attempt (netbios.rules) 5457 - NETBIOS SMB-DS llsrpc LlsrConnect unicode andx overflow attempt (netbios.rules) 5458 - NETBIOS SMB-DS llsrpc LlsrConnect andx overflow attempt (netbios.rules) 5459 - NETBIOS SMB llsrpc LlsrConnect andx overflow attempt (netbios.rules) 5460 - NETBIOS SMB-DS llsrpc LlsrConnect WriteAndX unicode little endian andx overflow attempt (netbios.rules) 5461 - NETBIOS SMB llsrpc LlsrConnect little endian andx overflow attempt (netbios.rules) 5462 - NETBIOS SMB llsrpc LlsrConnect unicode andx overflow attempt (netbios.rules) 5463 - NETBIOS SMB llsrpc LlsrConnect WriteAndX unicode little endian andx overflow attempt (netbios.rules) 5464 - NETBIOS SMB-DS llsrpc LlsrConnect WriteAndX andx overflow attempt (netbios.rules) 5465 - NETBIOS SMB llsrpc LlsrConnect WriteAndX andx overflow attempt (netbios.rules) 5466 - NETBIOS SMB-DS llsrpc LlsrConnect little endian andx overflow attempt (netbios.rules) 5467 - NETBIOS SMB-DS v4 llsrpc LlsrConnect little endian andx overflow attempt (netbios.rules) 5468 - NETBIOS SMB v4 llsrpc LlsrConnect WriteAndX andx overflow attempt (netbios.rules) 5469 - NETBIOS SMB-DS llsrpc LlsrConnect unicode little endian andx overflow attempt (netbios.rules) 5470 - NETBIOS SMB llsrpc LlsrConnect unicode little endian andx overflow attempt (netbios.rules) 5471 - NETBIOS SMB llsrpc LlsrConnect WriteAndX unicode andx overflow attempt (netbios.rules) 5472 - NETBIOS SMB v4 llsrpc LlsrConnect unicode andx overflow attempt (netbios.rules) 5473 - NETBIOS SMB-DS v4 llsrpc LlsrConnect WriteAndX andx overflow attempt (netbios.rules) 5474 - NETBIOS SMB-DS v4 llsrpc LlsrConnect unicode andx overflow attempt (netbios.rules) 5475 - NETBIOS SMB-DS v4 llsrpc LlsrConnect andx overflow attempt (netbios.rules) 5476 - NETBIOS SMB-DS v4 llsrpc LlsrConnect WriteAndX unicode andx overflow attempt (netbios.rules) 5477 - NETBIOS SMB v4 llsrpc LlsrConnect WriteAndX unicode andx overflow attempt (netbios.rules) 5478 - NETBIOS SMB v4 llsrpc LlsrConnect WriteAndX little endian andx overflow attempt (netbios.rules) 5479 - NETBIOS SMB v4 llsrpc LlsrConnect little endian andx overflow attempt (netbios.rules) 5480 - NETBIOS SMB v4 llsrpc LlsrConnect unicode little endian andx overflow attempt (netbios.rules) 5481 - NETBIOS SMB-DS v4 llsrpc LlsrConnect unicode little endian andx overflow attempt (netbios.rules) 5482 - NETBIOS SMB-DS v4 llsrpc LlsrConnect WriteAndX little endian andx overflow attempt (netbios.rules) 5483 - NETBIOS SMB-DS v4 llsrpc LlsrConnect WriteAndX unicode little endian andx overflow attempt (netbios.rules) 5484 - NETBIOS SMB v4 llsrpc LlsrConnect WriteAndX unicode little endian andx overflow attempt (netbios.rules) 5485 - NETBIOS SMB llsrpc2 LlsrLicenseRequestW unicode little endian overflow attempt (netbios.rules) 5486 - NETBIOS SMB-DS llsrpc2 LlsrLicenseRequestW unicode little endian overflow attempt (netbios.rules) 5487 - NETBIOS SMB-DS llsrpc2 LlsrLicenseRequestW overflow attempt (netbios.rules) 5488 - NETBIOS SMB llsrpc2 LlsrLicenseRequestW WriteAndX overflow attempt (netbios.rules) 5489 - NETBIOS SMB v4 llsrpc2 LlsrLicenseRequestW WriteAndX overflow attempt (netbios.rules) 5490 - NETBIOS SMB llsrpc2 LlsrLicenseRequestW WriteAndX little endian overflow attempt (netbios.rules) 5491 - NETBIOS SMB llsrpc2 LlsrLicenseRequestW unicode overflow attempt (netbios.rules) 5492 - NETBIOS SMB v4 llsrpc2 LlsrLicenseRequestW overflow attempt (netbios.rules) 5493 - NETBIOS SMB llsrpc2 LlsrLicenseRequestW WriteAndX unicode overflow attempt (netbios.rules) 5494 - NETBIOS SMB-DS llsrpc2 LlsrLicenseRequestW WriteAndX unicode overflow attempt (netbios.rules) 5495 - NETBIOS SMB llsrpc2 LlsrLicenseRequestW little endian overflow attempt (netbios.rules) 5496 - NETBIOS SMB-DS llsrpc2 LlsrLicenseRequestW WriteAndX overflow attempt (netbios.rules) 5497 - NETBIOS SMB-DS llsrpc2 LlsrLicenseRequestW WriteAndX little endian overflow attempt (netbios.rules) 5498 - NETBIOS SMB-DS llsrpc2 LlsrLicenseRequestW unicode overflow attempt (netbios.rules) 5499 - NETBIOS SMB llsrpc2 LlsrLicenseRequestW WriteAndX unicode little endian overflow attempt (netbios.rules) 5500 - NETBIOS SMB-DS v4 llsrpc2 LlsrLicenseRequestW overflow attempt (netbios.rules) 5501 - NETBIOS SMB-DS v4 llsrpc2 LlsrLicenseRequestW WriteAndX unicode overflow attempt (netbios.rules) 5502 - NETBIOS SMB v4 llsrpc2 LlsrLicenseRequestW unicode overflow attempt (netbios.rules) 5503 - NETBIOS SMB v4 llsrpc2 LlsrLicenseRequestW little endian overflow attempt (netbios.rules) 5504 - NETBIOS SMB-DS v4 llsrpc2 LlsrLicenseRequestW WriteAndX overflow attempt (netbios.rules) 5505 - NETBIOS SMB v4 llsrpc2 LlsrLicenseRequestW WriteAndX unicode little endian overflow attempt (netbios.rules) 5506 - NETBIOS SMB-DS v4 llsrpc2 LlsrLicenseRequestW unicode little endian overflow attempt (netbios.rules) 5507 - NETBIOS SMB v4 llsrpc2 LlsrLicenseRequestW WriteAndX little endian overflow attempt (netbios.rules) 5508 - NETBIOS SMB-DS llsrpc2 LlsrLicenseRequestW little endian overflow attempt (netbios.rules) 5509 - NETBIOS SMB-DS v4 llsrpc2 LlsrLicenseRequestW little endian overflow attempt (netbios.rules) 5510 - NETBIOS SMB-DS v4 llsrpc2 LlsrLicenseRequestW WriteAndX unicode little endian overflow attempt (netbios.rules) 5511 - NETBIOS SMB-DS v4 llsrpc2 LlsrLicenseRequestW WriteAndX little endian overflow attempt (netbios.rules) 5512 - NETBIOS SMB v4 llsrpc2 LlsrLicenseRequestW unicode little endian overflow attempt (netbios.rules) 5513 - NETBIOS SMB v4 llsrpc2 LlsrLicenseRequestW WriteAndX unicode overflow attempt (netbios.rules) 5514 - NETBIOS SMB llsrpc2 LlsrLicenseRequestW overflow attempt (netbios.rules) 5515 - NETBIOS SMB-DS llsrpc2 LlsrLicenseRequestW WriteAndX unicode little endian overflow attempt (netbios.rules) 5516 - NETBIOS SMB-DS v4 llsrpc2 LlsrLicenseRequestW unicode overflow attempt (netbios.rules) 5517 - NETBIOS SMB llsrpc2 LlsrLicenseRequestW unicode little endian andx overflow attempt (netbios.rules) 5518 - NETBIOS SMB-DS llsrpc2 LlsrLicenseRequestW unicode little endian andx overflow attempt (netbios.rules) 5519 - NETBIOS SMB-DS llsrpc2 LlsrLicenseRequestW andx overflow attempt (netbios.rules) 5520 - NETBIOS SMB llsrpc2 LlsrLicenseRequestW WriteAndX andx overflow attempt (netbios.rules) 5521 - NETBIOS SMB v4 llsrpc2 LlsrLicenseRequestW WriteAndX andx overflow attempt (netbios.rules) 5522 - NETBIOS SMB llsrpc2 LlsrLicenseRequestW WriteAndX little endian andx overflow attempt (netbios.rules) 5523 - NETBIOS SMB llsrpc2 LlsrLicenseRequestW unicode andx overflow attempt (netbios.rules) 5524 - NETBIOS SMB v4 llsrpc2 LlsrLicenseRequestW andx overflow attempt (netbios.rules) 5525 - NETBIOS SMB llsrpc2 LlsrLicenseRequestW WriteAndX unicode andx overflow attempt (netbios.rules) 5526 - NETBIOS SMB-DS llsrpc2 LlsrLicenseRequestW WriteAndX unicode andx overflow attempt (netbios.rules) 5527 - NETBIOS SMB llsrpc2 LlsrLicenseRequestW little endian andx overflow attempt (netbios.rules) 5528 - NETBIOS SMB-DS llsrpc2 LlsrLicenseRequestW WriteAndX andx overflow attempt (netbios.rules) 5529 - NETBIOS SMB-DS llsrpc2 LlsrLicenseRequestW WriteAndX little endian andx overflow attempt (netbios.rules) 5530 - NETBIOS SMB-DS llsrpc2 LlsrLicenseRequestW unicode andx overflow attempt (netbios.rules) 5531 - NETBIOS SMB llsrpc2 LlsrLicenseRequestW WriteAndX unicode little endian andx overflow attempt (netbios.rules) 5532 - NETBIOS SMB-DS v4 llsrpc2 LlsrLicenseRequestW andx overflow attempt (netbios.rules) 5533 - NETBIOS SMB-DS v4 llsrpc2 LlsrLicenseRequestW WriteAndX unicode andx overflow attempt (netbios.rules) 5534 - NETBIOS SMB v4 llsrpc2 LlsrLicenseRequestW unicode andx overflow attempt (netbios.rules) 5535 - NETBIOS SMB v4 llsrpc2 LlsrLicenseRequestW little endian andx overflow attempt (netbios.rules) 5536 - NETBIOS SMB-DS v4 llsrpc2 LlsrLicenseRequestW WriteAndX andx overflow attempt (netbios.rules) 5537 - NETBIOS SMB v4 llsrpc2 LlsrLicenseRequestW WriteAndX unicode little endian andx overflow attempt (netbios.rules) 5538 - NETBIOS SMB-DS v4 llsrpc2 LlsrLicenseRequestW unicode little endian andx overflow attempt (netbios.rules) 5539 - NETBIOS SMB v4 llsrpc2 LlsrLicenseRequestW WriteAndX little endian andx overflow attempt (netbios.rules) 5540 - NETBIOS SMB-DS llsrpc2 LlsrLicenseRequestW little endian andx overflow attempt (netbios.rules) 5541 - NETBIOS SMB-DS v4 llsrpc2 LlsrLicenseRequestW little endian andx overflow attempt (netbios.rules) 5542 - NETBIOS SMB-DS v4 llsrpc2 LlsrLicenseRequestW WriteAndX unicode little endian andx overflow attempt (netbios.rules) 5543 - NETBIOS SMB-DS v4 llsrpc2 LlsrLicenseRequestW WriteAndX little endian andx overflow attempt (netbios.rules) 5544 - NETBIOS SMB v4 llsrpc2 LlsrLicenseRequestW unicode little endian andx overflow attempt (netbios.rules) 5545 - NETBIOS SMB v4 llsrpc2 LlsrLicenseRequestW WriteAndX unicode andx overflow attempt (netbios.rules) 5546 - NETBIOS SMB llsrpc2 LlsrLicenseRequestW andx overflow attempt (netbios.rules) 5547 - NETBIOS SMB-DS llsrpc2 LlsrLicenseRequestW WriteAndX unicode little endian andx overflow attempt (netbios.rules) 5548 - NETBIOS SMB-DS v4 llsrpc2 LlsrLicenseRequestW unicode andx overflow attempt (netbios.rules) 5549 - NETBIOS SMB winreg andx alter context attempt (netbios.rules) 5550 - NETBIOS SMB winreg unicode andx alter context attempt (netbios.rules) 5551 - NETBIOS SMB winreg WriteAndX andx alter context attempt (netbios.rules) 5552 - NETBIOS SMB winreg WriteAndX unicode andx alter context attempt (netbios.rules) 5553 - NETBIOS SMB-DS winreg andx alter context attempt (netbios.rules) 5554 - NETBIOS SMB-DS winreg WriteAndX andx alter context attempt (netbios.rules) 5555 - NETBIOS SMB-DS winreg unicode andx alter context attempt (netbios.rules) 5556 - NETBIOS SMB-DS winreg WriteAndX unicode andx alter context attempt (netbios.rules) 5557 - NETBIOS SMB winreg little endian andx alter context attempt (netbios.rules) 5558 - NETBIOS SMB winreg WriteAndX little endian andx alter context attempt (netbios.rules) 5559 - NETBIOS SMB winreg unicode little endian andx alter context attempt (netbios.rules) 5560 - NETBIOS SMB winreg WriteAndX unicode little endian andx alter context attempt (netbios.rules) 5561 - NETBIOS SMB-DS winreg little endian andx alter context attempt (netbios.rules) 5562 - NETBIOS SMB-DS winreg WriteAndX little endian andx alter context attempt (netbios.rules) 5563 - NETBIOS SMB-DS winreg unicode little endian andx alter context attempt (netbios.rules) 5564 - NETBIOS SMB-DS winreg WriteAndX unicode little endian andx alter context attempt (netbios.rules) 5565 - NETBIOS SMB winreg andx bind attempt (netbios.rules) 5566 - NETBIOS SMB winreg unicode andx bind attempt (netbios.rules) 5567 - NETBIOS SMB winreg WriteAndX andx bind attempt (netbios.rules) 5568 - NETBIOS SMB winreg WriteAndX unicode andx bind attempt (netbios.rules) 5569 - NETBIOS SMB-DS winreg andx bind attempt (netbios.rules) 5570 - NETBIOS SMB-DS winreg WriteAndX andx bind attempt (netbios.rules) 5571 - NETBIOS SMB-DS winreg unicode andx bind attempt (netbios.rules) 5572 - NETBIOS SMB-DS winreg WriteAndX unicode andx bind attempt (netbios.rules) 5573 - NETBIOS SMB winreg little endian andx bind attempt (netbios.rules) 5574 - NETBIOS SMB winreg WriteAndX little endian andx bind attempt (netbios.rules) 5575 - NETBIOS SMB winreg unicode little endian andx bind attempt (netbios.rules) 5576 - NETBIOS SMB winreg WriteAndX unicode little endian andx bind attempt (netbios.rules) 5577 - NETBIOS SMB-DS winreg little endian andx bind attempt (netbios.rules) 5578 - NETBIOS SMB-DS winreg WriteAndX little endian andx bind attempt (netbios.rules) 5579 - NETBIOS SMB-DS winreg unicode little endian andx bind attempt (netbios.rules) 5580 - NETBIOS SMB-DS winreg WriteAndX unicode little endian andx bind attempt (netbios.rules) 5581 - NETBIOS SMB winreg OpenKey unicode overflow attempt (netbios.rules) 5582 - NETBIOS SMB-DS winreg OpenKey overflow attempt (netbios.rules) 5583 - NETBIOS SMB v4 winreg OpenKey WriteAndX overflow attempt (netbios.rules) 5584 - NETBIOS SMB-DS v4 winreg OpenKey WriteAndX unicode overflow attempt (netbios.rules) 5585 - NETBIOS SMB v4 winreg OpenKey overflow attempt (netbios.rules) 5586 - NETBIOS SMB-DS v4 winreg OpenKey unicode overflow attempt (netbios.rules) 5587 - NETBIOS SMB-DS v4 winreg OpenKey overflow attempt (netbios.rules) 5588 - NETBIOS SMB v4 winreg OpenKey WriteAndX unicode overflow attempt (netbios.rules) 5589 - NETBIOS SMB-DS v4 winreg OpenKey WriteAndX overflow attempt (netbios.rules) 5590 - NETBIOS SMB-DS v4 winreg OpenKey WriteAndX unicode little endian overflow attempt (netbios.rules) 5591 - NETBIOS SMB v4 winreg OpenKey WriteAndX little endian overflow attempt (netbios.rules) 5592 - NETBIOS SMB v4 winreg OpenKey WriteAndX unicode little endian overflow attempt (netbios.rules) 5593 - NETBIOS SMB v4 winreg OpenKey little endian overflow attempt (netbios.rules) 5594 - NETBIOS SMB-DS v4 winreg OpenKey unicode little endian overflow attempt (netbios.rules) 5595 - NETBIOS SMB-DS v4 winreg OpenKey WriteAndX little endian overflow attempt (netbios.rules) 5596 - NETBIOS SMB-DS v4 winreg OpenKey little endian overflow attempt (netbios.rules) 5597 - NETBIOS SMB winreg OpenKey WriteAndX unicode andx overflow attempt (netbios.rules) 5598 - NETBIOS SMB-DS winreg OpenKey WriteAndX little endian andx overflow attempt (netbios.rules) 5599 - NETBIOS SMB winreg OpenKey andx overflow attempt (netbios.rules) 5600 - NETBIOS SMB-DS winreg OpenKey WriteAndX unicode little endian andx overflow attempt (netbios.rules) 5601 - NETBIOS SMB winreg OpenKey WriteAndX little endian andx overflow attempt (netbios.rules) 5602 - NETBIOS SMB winreg OpenKey little endian andx overflow attempt (netbios.rules) 5603 - NETBIOS SMB-DS winreg OpenKey little endian andx overflow attempt (netbios.rules) 5604 - NETBIOS SMB-DS winreg OpenKey unicode andx overflow attempt (netbios.rules) 5605 - NETBIOS SMB winreg OpenKey WriteAndX unicode little endian andx overflow attempt (netbios.rules) 5606 - NETBIOS SMB-DS winreg OpenKey WriteAndX unicode andx overflow attempt (netbios.rules) 5607 - NETBIOS SMB-DS winreg OpenKey unicode little endian andx overflow attempt (netbios.rules) 5608 - NETBIOS SMB-DS winreg OpenKey WriteAndX andx overflow attempt (netbios.rules) 5609 - NETBIOS SMB v4 winreg OpenKey unicode andx overflow attempt (netbios.rules) 5610 - NETBIOS SMB v4 winreg OpenKey unicode little endian andx overflow attempt (netbios.rules) 5611 - NETBIOS SMB winreg OpenKey WriteAndX andx overflow attempt (netbios.rules) 5612 - NETBIOS SMB winreg OpenKey unicode little endian andx overflow attempt (netbios.rules) 5613 - NETBIOS SMB winreg OpenKey unicode andx overflow attempt (netbios.rules) 5614 - NETBIOS SMB-DS winreg OpenKey andx overflow attempt (netbios.rules) 5615 - NETBIOS SMB v4 winreg OpenKey WriteAndX andx overflow attempt (netbios.rules) 5616 - NETBIOS SMB-DS v4 winreg OpenKey WriteAndX unicode andx overflow attempt (netbios.rules) 5617 - NETBIOS SMB v4 winreg OpenKey andx overflow attempt (netbios.rules) 5618 - NETBIOS SMB-DS v4 winreg OpenKey unicode andx overflow attempt (netbios.rules) 5619 - NETBIOS SMB-DS v4 winreg OpenKey andx overflow attempt (netbios.rules) 5620 - NETBIOS SMB v4 winreg OpenKey WriteAndX unicode andx overflow attempt (netbios.rules) 5621 - NETBIOS SMB-DS v4 winreg OpenKey WriteAndX andx overflow attempt (netbios.rules) 5622 - NETBIOS SMB-DS v4 winreg OpenKey WriteAndX unicode little endian andx overflow attempt (netbios.rules) 5623 - NETBIOS SMB v4 winreg OpenKey WriteAndX little endian andx overflow attempt (netbios.rules) 5624 - NETBIOS SMB v4 winreg OpenKey WriteAndX unicode little endian andx overflow attempt (netbios.rules) 5625 - NETBIOS SMB v4 winreg OpenKey little endian andx overflow attempt (netbios.rules) 5626 - NETBIOS SMB-DS v4 winreg OpenKey unicode little endian andx overflow attempt (netbios.rules) 5627 - NETBIOS SMB-DS v4 winreg OpenKey WriteAndX little endian andx overflow attempt (netbios.rules) 5628 - NETBIOS SMB-DS v4 winreg OpenKey little endian andx overflow attempt (netbios.rules) 5629 - NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX unicode attempt (netbios.rules) 5630 - NETBIOS SMB v4 winreg InitiateSystemShutdown attempt (netbios.rules) 5631 - NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX attempt (netbios.rules) 5632 - NETBIOS SMB-DS v4 winreg InitiateSystemShutdown attempt (netbios.rules) 5633 - NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX unicode attempt (netbios.rules) 5634 - NETBIOS SMB-DS v4 winreg InitiateSystemShutdown unicode little endian attempt (netbios.rules) 5635 - NETBIOS SMB v4 winreg InitiateSystemShutdown little endian attempt (netbios.rules) 5636 - NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX unicode little endian attempt (netbios.rules) 5637 - NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX little endian attempt (netbios.rules) 5638 - NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX little endian attempt (netbios.rules) 5639 - NETBIOS SMB-DS v4 winreg InitiateSystemShutdown little endian attempt (netbios.rules) 5640 - NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX unicode little endian attempt (netbios.rules) 5641 - NETBIOS SMB winreg InitiateSystemShutdown WriteAndX attempt (netbios.rules) 5642 - NETBIOS SMB-DS winreg InitiateSystemShutdown unicode attempt (netbios.rules) 5643 - NETBIOS SMB winreg InitiateSystemShutdown WriteAndX unicode attempt (netbios.rules) 5644 - NETBIOS SMB winreg InitiateSystemShutdown attempt (netbios.rules) 5645 - NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX andx attempt (netbios.rules) 5646 - NETBIOS SMB winreg InitiateSystemShutdown unicode andx attempt (netbios.rules) 5647 - NETBIOS SMB winreg InitiateSystemShutdown little endian andx attempt (netbios.rules) 5648 - NETBIOS SMB-DS winreg InitiateSystemShutdown andx attempt (netbios.rules) 5649 - NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX little endian andx attempt (netbios.rules) 5650 - NETBIOS SMB winreg InitiateSystemShutdown unicode little endian andx attempt (netbios.rules) 5651 - NETBIOS SMB-DS winreg InitiateSystemShutdown unicode little endian andx attempt (netbios.rules) 5652 - NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX unicode andx attempt (netbios.rules) 5653 - NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX unicode little endian andx attempt (netbios.rules) 5654 - NETBIOS SMB-DS winreg InitiateSystemShutdown little endian andx attempt (netbios.rules) 5655 - NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX andx attempt (netbios.rules) 5656 - NETBIOS SMB v4 winreg InitiateSystemShutdown unicode andx attempt (netbios.rules) 5657 - NETBIOS SMB v4 winreg InitiateSystemShutdown unicode little endian andx attempt (netbios.rules) 5658 - NETBIOS SMB winreg InitiateSystemShutdown WriteAndX unicode little endian andx attempt (netbios.rules) 5659 - NETBIOS SMB winreg InitiateSystemShutdown WriteAndX little endian andx attempt (netbios.rules) 5660 - NETBIOS SMB-DS v4 winreg InitiateSystemShutdown unicode andx attempt (netbios.rules) 5661 - NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX unicode andx attempt (netbios.rules) 5662 - NETBIOS SMB v4 winreg InitiateSystemShutdown andx attempt (netbios.rules) 5663 - NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX andx attempt (netbios.rules) 5664 - NETBIOS SMB-DS v4 winreg InitiateSystemShutdown andx attempt (netbios.rules) 5665 - NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX unicode andx attempt (netbios.rules) 5666 - NETBIOS SMB-DS v4 winreg InitiateSystemShutdown unicode little endian andx attempt (netbios.rules) 5667 - NETBIOS SMB v4 winreg InitiateSystemShutdown little endian andx attempt (netbios.rules) 5668 - NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX unicode little endian andx attempt (netbios.rules) 5669 - NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX little endian andx attempt (netbios.rules) 5670 - NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX little endian andx attempt (netbios.rules) 5671 - NETBIOS SMB-DS v4 winreg InitiateSystemShutdown little endian andx attempt (netbios.rules) 5672 - NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX unicode little endian andx attempt (netbios.rules) 5673 - NETBIOS SMB winreg InitiateSystemShutdown WriteAndX andx attempt (netbios.rules) 5674 - NETBIOS SMB-DS winreg InitiateSystemShutdown unicode andx attempt (netbios.rules) 5675 - NETBIOS SMB winreg InitiateSystemShutdown WriteAndX unicode andx attempt (netbios.rules) 5676 - NETBIOS SMB winreg InitiateSystemShutdown andx attempt (netbios.rules) 5677 - NETBIOS SMB Session Setup username overflow attempt (netbios.rules) 5678 - NETBIOS SMB-DS Session Setup username overflow attempt (netbios.rules) 5679 - NETBIOS SMB-DS Session Setup unicode username overflow attempt (netbios.rules) 5680 - NETBIOS-DG SMB Session Setup username overflow attempt (netbios.rules) 5681 - NETBIOS-DG SMB Session Setup unicode username overflow attempt (netbios.rules) 5682 - NETBIOS SMB Session Setup unicode andx username overflow attempt (netbios.rules) 5683 - NETBIOS-DG SMB Session Setup andx username overflow attempt (netbios.rules) 5684 - NETBIOS-DG SMB Session Setup unicode andx username overflow attempt (netbios.rules) 5685 - SMTP TLSv1 Client_Hello via SSLv2 handshake request (smtp.rules) 5686 - SMTP TLSv1 Server_Hello request (smtp.rules) 5687 - SMTP SSLv2 Client_Hello request (smtp.rules) 5688 - SMTP SSLv2 Client_Hello with pad request (smtp.rules) 5689 - SMTP TLSv1 Client_Hello request (smtp.rules) 5690 - SMTP SSLv3 Client_Hello request (smtp.rules) 5691 - SMTP SSLv2 Server_Hello request (smtp.rules) Updated rules: 106 - DELETED BACKDOOR ACKcmdC trojan scan (deleted.rules) 111 - DELETED BACKDOOR netbus getinfo (deleted.rules) 112 - DELETED BACKDOOR BackOrifice access (deleted.rules) 113 - DELETED BACKDOOR DeepThroat access (deleted.rules) 114 - DELETED BACKDOOR netbus active (deleted.rules) 116 - DELETED BACKDOOR BackOrifice access (deleted.rules) 122 - DELETED BACKDOOR DeepThroat 3.1 System Info Client Request (deleted.rules) 124 - DELETED BACKDOOR DeepThroat 3.1 FTP Status Client Request (deleted.rules) 125 - DELETED BACKDOOR DeepThroat 3.1 E-Mail Info From Server (deleted.rules) 126 - DELETED BACKDOOR DeepThroat 3.1 E-Mail Info Client Request (deleted.rules) 127 - DELETED BACKDOOR DeepThroat 3.1 Server Status From Server (deleted.rules) 128 - DELETED BACKDOOR DeepThroat 3.1 Server Status Client Request (deleted.rules) 129 - DELETED BACKDOOR DeepThroat 3.1 Drive Info From Server (deleted.rules) 130 - DELETED BACKDOOR DeepThroat 3.1 System Info From Server (deleted.rules) 131 - DELETED BACKDOOR DeepThroat 3.1 Drive Info Client Request (deleted.rules) 132 - DELETED BACKDOOR DeepThroat 3.1 Server FTP Port Change From Server (deleted.rules) 133 - DELETED BACKDOOR DeepThroat 3.1 Cached Passwords Client Request (deleted.rules) 134 - DELETED BACKDOOR DeepThroat 3.1 RAS Passwords Client Request (deleted.rules) 135 - DELETED BACKDOOR DeepThroat 3.1 Server Password Change Client Request (deleted.rules) 136 - DELETED BACKDOOR DeepThroat 3.1 Server Password Remove Client Request (deleted.rules) 137 - DELETED BACKDOOR DeepThroat 3.1 Rehash Client Request (deleted.rules) 138 - DELETED BACKDOOR DeepThroat 3.1 Server Rehash Client Request (deleted.rules) 140 - DELETED BACKDOOR DeepThroat 3.1 ICQ Alert OFF Client Request (deleted.rules) 142 - DELETED BACKDOOR DeepThroat 3.1 ICQ Alert ON Client Request (deleted.rules) 143 - DELETED BACKDOOR DeepThroat 3.1 Change Wallpaper Client Request (deleted.rules) 148 - DELETED BACKDOOR DeepThroat 3.1 Keylogger Active on Network (deleted.rules) 149 - DELETED BACKDOOR DeepThroat 3.1 Client Sending Data to Server on Network (deleted.rules) 150 - DELETED BACKDOOR DeepThroat 3.1 Server Active on Network (deleted.rules) 151 - DELETED BACKDOOR DeepThroat 3.1 Client Sending Data to Server on Network (deleted.rules) 154 - DELETED BACKDOOR DeepThroat 3.1 Wrong Password (deleted.rules) 156 - DELETED BACKDOOR DeepThroat 3.1 Visible Window List Client Request (deleted.rules) 160 - DELETED BACKDOOR NetMetro Incoming Traffic (deleted.rules) 164 - DELETED BACKDOOR DeepThroat 3.1 Server Active on Network (deleted.rules) 165 - DELETED BACKDOOR DeepThroat 3.1 Keylogger on Server ON (deleted.rules) 166 - DELETED BACKDOOR DeepThroat 3.1 Show Picture Client Request (deleted.rules) 167 - DELETED BACKDOOR DeepThroat 3.1 Hide/Show Clock Client Request (deleted.rules) 168 - DELETED BACKDOOR DeepThroat 3.1 Hide/Show Desktop Client Request (deleted.rules) 169 - DELETED BACKDOOR DeepThroat 3.1 Swap Mouse Buttons Client Request (deleted.rules) 170 - DELETED BACKDOOR DeepThroat 3.1 Enable/Disable CTRL-ALT-DEL Client Request (deleted.rules) 171 - DELETED BACKDOOR DeepThroat 3.1 Freeze Mouse Client Request (deleted.rules) 172 - DELETED BACKDOOR DeepThroat 3.1 Show Dialog Box Client Request (deleted.rules) 173 - DELETED BACKDOOR DeepThroat 3.1 Show Replyable Dialog Box Client Request (deleted.rules) 174 - DELETED BACKDOOR DeepThroat 3.1 Hide/Show Start Button Client Request (deleted.rules) 175 - DELETED BACKDOOR DeepThroat 3.1 Resolution Change Client Request (deleted.rules) 176 - DELETED BACKDOOR DeepThroat 3.1 Hide/Show Start Button Client Request (deleted.rules) 177 - DELETED BACKDOOR DeepThroat 3.1 Keylogger on Server OFF (deleted.rules) 179 - DELETED BACKDOOR DeepThroat 3.1 FTP Server Port Client Request (deleted.rules) 180 - DELETED BACKDOOR DeepThroat 3.1 Process List Client request (deleted.rules) 181 - DELETED BACKDOOR DeepThroat 3.1 Close Port Scan Client Request (deleted.rules) 182 - DELETED BACKDOOR DeepThroat 3.1 Registry Add Client Request (deleted.rules) 183 - DELETED BACKDOOR SIGNATURE - Q ICMP (deleted.rules) 184 - DELETED BACKDOOR Q access (deleted.rules) 186 - DELETED BACKDOOR DeepThroat 3.1 Monitor on/off Client Request (deleted.rules) 187 - DELETED BACKDOOR DeepThroat 3.1 Delete File Client Request (deleted.rules) 188 - DELETED BACKDOOR DeepThroat 3.1 Kill Window Client Request (deleted.rules) 189 - DELETED BACKDOOR DeepThroat 3.1 Disable Window Client Request (deleted.rules) 190 - DELETED BACKDOOR DeepThroat 3.1 Enable Window Client Request (deleted.rules) 191 - DELETED BACKDOOR DeepThroat 3.1 Change Window Title Client Request (deleted.rules) 192 - DELETED BACKDOOR DeepThroat 3.1 Hide Window Client Request (deleted.rules) 193 - DELETED BACKDOOR DeepThroat 3.1 Show Window Client Request (deleted.rules) 194 - DELETED BACKDOOR DeepThroat 3.1 Send Text to Window Client Request (deleted.rules) 196 - DELETED BACKDOOR DeepThroat 3.1 Hide/Show Systray Client Request (deleted.rules) 197 - DELETED BACKDOOR DeepThroat 3.1 Create Directory Client Request (deleted.rules) 198 - DELETED BACKDOOR DeepThroat 3.1 All Window List Client Request (deleted.rules) 199 - DELETED BACKDOOR DeepThroat 3.1 Play Sound Client Request (deleted.rules) 200 - DELETED BACKDOOR DeepThroat 3.1 Run Program Normal Client Request (deleted.rules) 201 - DELETED BACKDOOR DeepThroat 3.1 Run Program Hidden Client Request (deleted.rules) 202 - DELETED BACKDOOR DeepThroat 3.1 Get NET File Client Request (deleted.rules) 203 - DELETED BACKDOOR DeepThroat 3.1 Find File Client Request (deleted.rules) 204 - DELETED BACKDOOR DeepThroat 3.1 Find File Client Request (deleted.rules) 205 - DELETED BACKDOOR DeepThroat 3.1 HUP Modem Client Request (deleted.rules) 206 - DELETED BACKDOOR DeepThroat 3.1 CD ROM Open Client Request (deleted.rules) 207 - DELETED BACKDOOR DeepThroat 3.1 CD ROM Close Client Request (deleted.rules) 249 - DELETED DDOS mstream client to handler (deleted.rules) 252 - DELETED DNS named iquery attempt (deleted.rules) 268 - DELETED DOS Jolt attack (deleted.rules) 269 - DELETED DOS Land attack (deleted.rules) 270 - DELETED DOS Teardrop attack (deleted.rules) 273 - DELETED DOS IGMP dos attack (deleted.rules) 291 - DELETED NNTP Cassandra Overflow (deleted.rules) 293 - DELETED IMAP EXPLOIT overflow (deleted.rules) 295 - DELETED IMAP EXPLOIT x86 linux overflow (deleted.rules) 296 - DELETED IMAP EXPLOIT x86 linux overflow (deleted.rules) 297 - DELETED IMAP EXPLOIT x86 linux overflow (deleted.rules) 298 - DELETED IMAP EXPLOIT x86 linux overflow (deleted.rules) 299 - DELETED IMAP EXPLOIT x86 linux overflow (deleted.rules) 318 - DELETED EXPLOIT bootp x86 bsd overfow (deleted.rules) 319 - DELETED EXPLOIT bootp x86 linux overflow (deleted.rules) 325 - DELETED FINGER probe 0 attempt (deleted.rules) 329 - DELETED FINGER cybercop redirection (deleted.rules) 338 - DELETED FTP EXPLOIT format string (deleted.rules) 339 - DELETED FTP EXPLOIT OpenBSD x86 ftpd (deleted.rules) 340 - DELETED FTP EXPLOIT overflow (deleted.rules) 341 - DELETED FTP EXPLOIT overflow (deleted.rules) 342 - DELETED FTP EXPLOIT wu-ftpd 2.6.0 site exec format string overflow Solaris 2.8 (deleted.rules) 343 - DELETED FTP EXPLOIT wu-ftpd 2.6.0 site exec format string overflow FreeBSD (deleted.rules) 344 - DELETED FTP EXPLOIT wu-ftpd 2.6.0 site exec format string overflow Linux (deleted.rules) 345 - DELETED FTP EXPLOIT wu-ftpd 2.6.0 site exec format string overflow generic (deleted.rules) 346 - DELETED FTP EXPLOIT wu-ftpd 2.6.0 site exec format string check (deleted.rules) 348 - DELETED FTP EXPLOIT wu-ftpd 2.6.0 (deleted.rules) 349 - DELETED FTP EXPLOIT MKD overflow (deleted.rules) 350 - DELETED FTP EXPLOIT x86 linux overflow (deleted.rules) 351 - DELETED FTP EXPLOIT x86 linux overflow (deleted.rules) 352 - DELETED FTP EXPLOIT x86 linux overflow (deleted.rules) 455 - DELETED ICMP Traceroute ipopts (deleted.rules) 496 - DELETED ATTACK RESPONSES directory listing (deleted.rules) 499 - DELETED ICMP Large ICMP Packet (deleted.rules) 506 - DELETED MISC ramen worm incoming (deleted.rules) 511 - DELETED MISC Invalid PCAnywhere Login (deleted.rules) 513 - DELETED MISC Cisco Catalyst Remote Access (deleted.rules) 522 - DELETED MISC Tiny Fragments (deleted.rules) 527 - DELETED BAD-TRAFFIC same SRC/DST (deleted.rules) 539 - DELETED NETBIOS Samba clientaccess (deleted.rules) 558 - DELETED INFO Outbound GNUTella client request (deleted.rules) 559 - DELETED P2P Inbound GNUTella client request (deleted.rules) 570 - DELETED RPC EXPLOIT ttdbserv solaris overflow (deleted.rules) 571 - DELETED RPC EXPLOIT ttdbserv Solaris overflow (deleted.rules) 573 - DELETED RPC AMD Overflow (deleted.rules) 592 - DELETED RPC rstatd query (deleted.rules) 596 - DELETED RPC portmap listing (deleted.rules) 597 - DELETED RPC portmap listing (deleted.rules) 600 - DELETED RPC EXPLOIT statdx (deleted.rules) 615 - DELETED SCAN SOCKS Proxy attempt (deleted.rules) 617 - DELETED SCAN ssh-research-scanner (deleted.rules) 618 - DELETED SCAN Squid Proxy attempt (deleted.rules) 620 - DELETED SCAN Proxy Port 8080 attempt (deleted.rules) 628 - DELETED SCAN nmap TCP (deleted.rules) 629 - DELETED SCAN nmap fingerprint attempt (deleted.rules) 656 - DELETED SMTP EXPLOIT x86 windows CSMMail overflow (deleted.rules) 666 - DELETED SMTP sendmail 8.4.1 exploit (deleted.rules) 716 - DELETED INFO TELNET access (deleted.rules) 720 - DELETED Virus - SnowWhite Trojan Incoming (deleted.rules) 722 - DELETED Virus - Possible NAVIDAD Worm (deleted.rules) 723 - DELETED Virus - Possible MyRomeo Worm (deleted.rules) 724 - DELETED Virus - Possible MyRomeo Worm (deleted.rules) 725 - DELETED Virus - Possible MyRomeo Worm (deleted.rules) 726 - DELETED Virus - Possible MyRomeo Worm (deleted.rules) 727 - DELETED Virus - Possible MyRomeo Worm (deleted.rules) 728 - DELETED Virus - Possible MyRomeo Worm (deleted.rules) 729 - DELETED VIRUS OUTBOUND .scr file attachment (deleted.rules) 730 - DELETED VIRUS OUTBOUND .shs file attachment (deleted.rules) 731 - DELETED Virus - Possible QAZ Worm (deleted.rules) 732 - DELETED Virus - Possible QAZ Worm Infection (deleted.rules) 733 - DELETED Virus - Possible QAZ Worm Calling Home (deleted.rules) 734 - DELETED Virus - Possible Matrix worm (deleted.rules) 735 - DELETED Virus - Possible MyRomeo Worm (deleted.rules) 736 - DELETED Virus - Successful eurocalculator execution (deleted.rules) 737 - DELETED Virus - Possible eurocalculator.exe file (deleted.rules) 738 - DELETED Virus - Possible Pikachu Pokemon Virus (deleted.rules) 739 - DELETED Virus - Possible Triplesix Worm (deleted.rules) 740 - DELETED Virus - Possible Tune.vbs (deleted.rules) 741 - DELETED Virus - Possible NAIL Worm (deleted.rules) 742 - DELETED Virus - Possible NAIL Worm (deleted.rules) 743 - DELETED Virus - Possible NAIL Worm (deleted.rules) 744 - DELETED Virus - Possible NAIL Worm (deleted.rules) 745 - DELETED Virus - Possible Papa Worm (deleted.rules) 746 - DELETED Virus - Possible Freelink Worm (deleted.rules) 747 - DELETED Virus - Possible Simbiosis Worm (deleted.rules) 748 - DELETED Virus - Possible BADASS Worm (deleted.rules) 749 - DELETED Virus - Possible ExploreZip.B Worm (deleted.rules) 751 - DELETED Virus - Possible wscript.KakWorm (deleted.rules) 752 - DELETED Virus Possible Suppl Worm (deleted.rules) 753 - DELETED Virus - Possible NewApt.Worm - theobbq.exe (deleted.rules) 754 - DELETED Virus - Possible Word Macro - VALE (deleted.rules) 755 - DELETED Virus - Possible IROK Worm (deleted.rules) 756 - DELETED Virus - Possible Fix2001 Worm (deleted.rules) 757 - DELETED Virus - Possible Y2K Zelu Trojan (deleted.rules) 758 - DELETED Virus - Possible The_Fly Trojan (deleted.rules) 759 - DELETED Virus - Possible Word Macro - VALE (deleted.rules) 760 - DELETED Virus - Possible Passion Worm (deleted.rules) 761 - DELETED Virus - Possible NewApt.Worm - cooler3.exe (deleted.rules) 762 - DELETED Virus - Possible NewApt.Worm - party.exe (deleted.rules) 763 - DELETED Virus - Possible NewApt.Worm - hog.exe (deleted.rules) 764 - DELETED Virus - Possible NewApt.Worm - goal1.exe (deleted.rules) 765 - DELETED Virus - Possible NewApt.Worm - pirate.exe (deleted.rules) 766 - DELETED Virus - Possible NewApt.Worm - video.exe (deleted.rules) 767 - DELETED Virus - Possible NewApt.Worm - baby.exe (deleted.rules) 768 - DELETED Virus - Possible NewApt.Worm - cooler1.exe (deleted.rules) 769 - DELETED Virus - Possible NewApt.Worm - boss.exe (deleted.rules) 770 - DELETED Virus - Possible NewApt.Worm - g-zilla.exe (deleted.rules) 771 - DELETED Virus - Possible ToadieE-mail Trojan (deleted.rules) 772 - DELETED Virus - Possible PrettyPark Trojan (deleted.rules) 773 - DELETED Virus - Possible Happy99 Virus (deleted.rules) 774 - DELETED Virus - Possible CheckThis Trojan (deleted.rules) 775 - DELETED Virus - Possible Bubbleboy Worm (deleted.rules) 776 - DELETED Virus - Possible NewApt.Worm - copier.exe (deleted.rules) 777 - DELETED Virus - Possible MyPics Worm (deleted.rules) 778 - DELETED Virus - Possible Babylonia - X-MAS.exe (deleted.rules) 779 - DELETED Virus - Possible NewApt.Worm - gadget.exe (deleted.rules) 780 - DELETED Virus - Possible NewApt.Worm - irnglant.exe (deleted.rules) 781 - DELETED Virus - Possible NewApt.Worm - casper.exe (deleted.rules) 782 - DELETED Virus - Possible NewApt.Worm - fborfw.exe (deleted.rules) 783 - DELETED Virus - Possible NewApt.Worm - saddam.exe (deleted.rules) 784 - DELETED Virus - Possible NewApt.Worm - bboy.exe (deleted.rules) 785 - DELETED Virus - Possible NewApt.Worm - monica.exe (deleted.rules) 786 - DELETED Virus - Possible NewApt.Worm - goal.exe (deleted.rules) 787 - DELETED Virus - Possible NewApt.Worm - panther.exe (deleted.rules) 788 - DELETED Virus - Possible NewApt.Worm - chestburst.exe (deleted.rules) 789 - DELETED Virus - Possible NewApt.Worm - farter.exe (deleted.rules) 790 - DELETED Virus - Possible Common Sense Worm (deleted.rules) 791 - DELETED Virus - Possible NewApt.Worm - cupid2.exe (deleted.rules) 792 - DELETED Virus - Possible Resume Worm (deleted.rules) 793 - DELETED VIRUS OUTBOUND .vbs file attachment (deleted.rules) 794 - DELETED Virus - Possible Resume Worm (deleted.rules) 795 - DELETED Virus - Possible Worm - txt.vbs file (deleted.rules) 796 - DELETED Virus - Possible Worm - xls.vbs file (deleted.rules) 797 - DELETED Virus - Possible Worm - jpg.vbs file (deleted.rules) 798 - DELETED Virus - Possible Worm - gif.vbs file (deleted.rules) 799 - DELETED Virus - Possible Timofonica Worm (deleted.rules) 800 - DELETED Virus - Possible Resume Worm (deleted.rules) 801 - DELETED Virus - Possible Worm - doc.vbs file (deleted.rules) 802 - DELETED Virus - Possbile Zipped Files Trojan (deleted.rules) 855 - DELETED WEB-CGI edit.pl access (deleted.rules) 874 - DELETED WEB-CGI w3-msql solaris x86 access (deleted.rules) 893 - DELETED WEB-CGI MachineInfo access (deleted.rules) 970 - DELETED WEB-IIS multiple decode attempt (deleted.rules) 981 - DELETED WEB-IIS unicode directory traversal attempt (deleted.rules) 982 - DELETED WEB-IIS unicode directory traversal attempt (deleted.rules) 983 - DELETED WEB-IIS unicode directory traversal attempt (deleted.rules) 1049 - DELETED WEB-MISC iPlanet ../../ DOS attempt (deleted.rules) 1055 - DELETED WEB-MISC Tomcat directory traversal attempt (deleted.rules) 1094 - DELETED WEB-CGI webstore directory traversal (deleted.rules) 1113 - DELETED WEB-MISC http directory traversal (deleted.rules) 1114 - DELETED WEB-MISC prefix-get // (deleted.rules) 1121 - DELETED WEB-MISC O'Reilly args.bat access (deleted.rules) 1138 - DELETED WEB-MISC Cisco Web DOS attempt (deleted.rules) 1176 - DELETED WEB-MISC order.log access (deleted.rules) 1182 - DELETED WEB-MISC cgitest.exe attempt (deleted.rules) 1227 - DELETED X11 outbound client connection detected (deleted.rules) 1236 - DELETED WEB-MISC Tomcat sourecode view (deleted.rules) 1237 - DELETED WEB-MISC Tomcat sourecode view (deleted.rules) 1238 - DELETED WEB-MISC Tomcat sourecode view (deleted.rules) 1246 - DELETED WEB-FRONTPAGE rad overflow attempt (deleted.rules) 1247 - DELETED WEB-FRONTPAGE rad overflow attempt (deleted.rules) 1251 - DELETED INFO TELNET Bad Login (deleted.rules) 1260 - WEB-MISC long basic authorization string (web-misc.rules) 1278 - DELETED RPC rstatd query (deleted.rules) 1282 - DELETED RPC EXPLOIT statdx (deleted.rules) 1296 - DELETED RPC portmap request yppasswdd (deleted.rules) 1297 - DELETED RPC portmap request yppasswdd (deleted.rules) 1298 - DELETED RPC portmap tooltalk request TCP (deleted.rules) 1299 - DELETED RPC portmap tooltalk request UDP (deleted.rules) 1328 - DELETED WEB-ATTACKS /bin/ps command attempt (deleted.rules) 1329 - DELETED WEB-ATTACKS ps command attempt (deleted.rules) 1330 - DELETED WEB-ATTACKS wget command attempt (deleted.rules) 1331 - DELETED WEB-ATTACKS uname -a command attempt (deleted.rules) 1332 - DELETED WEB-ATTACKS /usr/bin/id command attempt (deleted.rules) 1333 - DELETED WEB-ATTACKS id command attempt (deleted.rules) 1334 - DELETED WEB-ATTACKS echo command attempt (deleted.rules) 1335 - DELETED WEB-ATTACKS kill command attempt (deleted.rules) 1336 - DELETED WEB-ATTACKS chmod command attempt (deleted.rules) 1337 - DELETED WEB-ATTACKS chgrp command attempt (deleted.rules) 1338 - DELETED WEB-ATTACKS chown command attempt (deleted.rules) 1339 - DELETED WEB-ATTACKS chsh command attempt (deleted.rules) 1340 - DELETED WEB-ATTACKS tftp command attempt (deleted.rules) 1341 - DELETED WEB-ATTACKS /usr/bin/gcc command attempt (deleted.rules) 1342 - DELETED WEB-ATTACKS gcc command attempt (deleted.rules) 1343 - DELETED WEB-ATTACKS /usr/bin/cc command attempt (deleted.rules) 1344 - DELETED WEB-ATTACKS cc command attempt (deleted.rules) 1345 - DELETED WEB-ATTACKS /usr/bin/cpp command attempt (deleted.rules) 1346 - DELETED WEB-ATTACKS cpp command attempt (deleted.rules) 1347 - DELETED WEB-ATTACKS /usr/bin/g++ command attempt (deleted.rules) 1348 - DELETED WEB-ATTACKS g++ command attempt (deleted.rules) 1349 - DELETED WEB-ATTACKS bin/python access attempt (deleted.rules) 1350 - DELETED WEB-ATTACKS python access attempt (deleted.rules) 1351 - DELETED WEB-ATTACKS bin/tclsh execution attempt (deleted.rules) 1352 - DELETED WEB-ATTACKS tclsh execution attempt (deleted.rules) 1353 - DELETED WEB-ATTACKS bin/nasm command attempt (deleted.rules) 1354 - DELETED WEB-ATTACKS nasm command attempt (deleted.rules) 1355 - DELETED WEB-ATTACKS /usr/bin/perl execution attempt (deleted.rules) 1356 - DELETED WEB-ATTACKS perl execution attempt (deleted.rules) 1357 - DELETED WEB-ATTACKS nt admin addition attempt (deleted.rules) 1358 - DELETED WEB-ATTACKS traceroute command attempt (deleted.rules) 1359 - DELETED WEB-ATTACKS ping command attempt (deleted.rules) 1360 - DELETED WEB-ATTACKS netcat command attempt (deleted.rules) 1361 - DELETED WEB-ATTACKS nmap command attempt (deleted.rules) 1362 - DELETED WEB-ATTACKS xterm command attempt (deleted.rules) 1363 - DELETED WEB-ATTACKS X application to remote host attempt (deleted.rules) 1364 - DELETED WEB-ATTACKS lsof command attempt (deleted.rules) 1365 - DELETED WEB-ATTACKS rm command attempt (deleted.rules) 1366 - DELETED WEB-ATTACKS mail command attempt (deleted.rules) 1367 - DELETED WEB-ATTACKS mail command attempt (deleted.rules) 1368 - DELETED WEB-ATTACKS /bin/ls| command attempt (deleted.rules) 1369 - DELETED WEB-ATTACKS /bin/ls command attempt (deleted.rules) 1370 - DELETED WEB-ATTACKS /etc/inetd.conf access (deleted.rules) 1371 - DELETED WEB-ATTACKS /etc/motd access (deleted.rules) 1372 - DELETED WEB-ATTACKS /etc/shadow access (deleted.rules) 1373 - DELETED WEB-ATTACKS conf/httpd.conf attempt (deleted.rules) 1438 - DELETED MULTIMEDIA Windows Media Video download (deleted.rules) 1449 - DELETED POLICY FTP anonymous ftp login attempt (deleted.rules) 1477 - DELETED WEB-CGI swc attempt (deleted.rules) 1484 - DELETED WEB-IIS /isapi/tstisapi.dll access (deleted.rules) 1530 - DELETED FTP format string attempt (deleted.rules) 1553 - DELETED WEB-CGI /cart/cart.cgi access (deleted.rules) 1561 - DELETED WEB-MISC ?open access (deleted.rules) 1609 - DELETED WEB-CGI faxsurvey arbitrary file read attempt (deleted.rules) 1619 - DELETED EXPERIMENTAL WEB-IIS .htr request (deleted.rules) 1620 - DELETED BAD TRAFFIC Non-Standard IP protocol (deleted.rules) 1647 - DELETED WEB-CGI faxsurvey attempt full path (deleted.rules) 1653 - DELETED WEB-CGI campus access (deleted.rules) 1665 - DELETED WEB-MISC mkilog.exe access (deleted.rules) 1698 - DELETED ORACLE execute_system attempt (deleted.rules) 1728 - DELETED FTP CWD ~attempt (deleted.rules) 1749 - DELETED EXPERIMENTAL WEB-IIS .NET trace.axd access (deleted.rules) 1758 - DELETED WEB-MISC b2 access (deleted.rules) 1768 - DELETED WEB-IIS header field buffer overflow attempt (deleted.rules) 1779 - DELETED FTP CWD .... attempt (deleted.rules) 1780 - DELETED IMAP EXPLOIT partial body overflow attempt (deleted.rules) 1791 - DELETED BACKDOOR fragroute trojan connection attempt (deleted.rules) 1800 - DELETED VIRUS Klez Incoming (deleted.rules) 1860 - WEB-MISC Linksys router default password login attempt (web-misc.rules) 1861 - WEB-MISC Linksys router default username and password login attempt (web-misc.rules) 1883 - DELETED ATTACK-RESPONSES id check returned nobody (deleted.rules) 1884 - DELETED ATTACK-RESPONSES id check returned web (deleted.rules) 1885 - DELETED ATTACK-RESPONSES id check returned http (deleted.rules) 1886 - DELETED ATTACK-RESPONSES id check returned apache (deleted.rules) 1929 - DELETED BACKDOOR TCPDUMP/PCAP trojan traffic (deleted.rules) 1945 - DELETED WEB-IIS unicode directory traversal attempt (deleted.rules) 2102 - DELETED NETBIOS SMB SMB_COM_TRANSACTION Max Data Count of 0 DOS Attempt (deleted.rules) 2109 - POP3 TOP overflow attempt (pop3.rules) 2160 - DELETED VIRUS OUTBOUND .exe file attachment (deleted.rules) 2161 - DELETED VIRUS OUTBOUND .doc file attachment (deleted.rules) 2162 - DELETED VIRUS OUTBOUND .hta file attachment (deleted.rules) 2163 - DELETED VIRUS OUTBOUND .chm file attachment (deleted.rules) 2164 - DELETED VIRUS OUTBOUND .reg file attachment (deleted.rules) 2165 - DELETED VIRUS OUTBOUND .ini file attachment (deleted.rules) 2166 - DELETED VIRUS OUTBOUND .bat file attachment (deleted.rules) 2167 - DELETED VIRUS OUTBOUND .diz file attachment (deleted.rules) 2168 - DELETED VIRUS OUTBOUND .cpp file attachment (deleted.rules) 2169 - DELETED VIRUS OUTBOUND .dll file attachment (deleted.rules) 2170 - DELETED VIRUS OUTBOUND .vxd file attachment (deleted.rules) 2171 - DELETED VIRUS OUTBOUND .sys file attachment (deleted.rules) 2172 - DELETED VIRUS OUTBOUND .com file attachment (deleted.rules) 2173 - DELETED VIRUS OUTBOUND .hsq file attachment (deleted.rules) 2174 - NETBIOS SMB winreg little endian bind attempt (netbios.rules) 2175 - NETBIOS SMB winreg WriteAndX little endian bind attempt (netbios.rules) 2182 - DELETED BACKDOOR typot trojan traffic (deleted.rules) 2230 - WEB-MISC NetGear router default password login attempt admin/password (web-misc.rules) 2254 - DELETED SMTP XEXCH50 overflow with evasion attempt (deleted.rules) 2278 - WEB-MISC client negative Content-Length attempt (web-misc.rules) 2314 - DELETED SHELLCODE x86 0x90 NOOP unicode (deleted.rules) 2336 - DELETED TFTP NULL command attempt (deleted.rules) 2384 - DELETED NETBIOS SMB NTLMSSP invalid mechlistMIC attempt (deleted.rules) 2385 - DELETED NETBIOS SMB-DS DCERPC NTLMSSP invalid mechlistMIC attempt (deleted.rules) 2401 - NETBIOS SMB Session Setup andx username overflow attempt (netbios.rules) 2402 - NETBIOS SMB-DS Session Setup andx username overflow attempt (netbios.rules) 2403 - NETBIOS SMB Session Setup unicode username overflow attempt (netbios.rules) 2404 - NETBIOS SMB-DS Session Setup unicode andx username overflow attempt (netbios.rules) 2437 - WEB-CLIENT RealPlayer arbitrary javascript command attempt (web-client.rules) 2441 - WEB-MISC NetObserve authentication bypass attempt (web-misc.rules) 2443 - DELETED EXPLOIT ICQ SRV_MULTI/SRV_META_USER first name overflow attempt (deleted.rules) 2444 - DELETED EXPLOIT ICQ SRV_MULTI/SRV_META_USER first name overflow attempt (deleted.rules) 2445 - DELETED EXPLOIT ICQ SRV_MULTI/SRV_META_USER last name overflow attempt (deleted.rules) 2476 - NETBIOS SMB winreg unicode little endian bind attempt (netbios.rules) 2477 - NETBIOS SMB winreg WriteAndX unicode little endian bind attempt (netbios.rules) 2478 - NETBIOS SMB winreg WriteAndX alter context attempt (netbios.rules) 2479 - NETBIOS SMB winreg WriteAndX unicode alter context attempt (netbios.rules) 2480 - NETBIOS SMB-DS winreg InitiateSystemShutdown unicode little endian attempt (netbios.rules) 2481 - NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX unicode attempt (netbios.rules) 2482 - NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX little endian attempt (netbios.rules) 2483 - NETBIOS SMB winreg InitiateSystemShutdown unicode little endian attempt (netbios.rules) 2494 - DELETED NETBIOS DCEPRC ORPCThis request flood attempt (deleted.rules) 2495 - DELETED NETBIOS SMB DCEPRC ORPCThis request flood attempt (deleted.rules) 2496 - DELETED NETBIOS SMB-DS DCEPRC ORPCThis request flood attempt (deleted.rules) 2498 - DELETED IMAP SSLv3 invalid timestamp attempt (deleted.rules) 2499 - DELETED MISC LDAP SSLv3 invalid timestamp attempt (deleted.rules) 2501 - DELETED POP3 SSLv3 invalid timestamp attempt (deleted.rules) 2503 - DELETED SMTP SSLv3 invalid timestamp attempt (deleted.rules) 2505 - DELETED WEB-MISC SSLv3 invalid data version attempt (deleted.rules) 2506 - DELETED WEB-MISC SSLv3 invalid timestamp attempt (deleted.rules) 2516 - DELETED POP3 PCT Client_Hello overflow attempt (deleted.rules) 2519 - DELETED SMTP Client_Hello overflow attempt (deleted.rules) 2538 - DELETED SMTP SSLv3 Client_Hello request (deleted.rules) 2539 - DELETED SMTP SSLv3 Server_Hello request (deleted.rules) 2540 - DELETED SMTP SSLv3 invalid Client_Hello attempt (deleted.rules) 2543 - SMTP SSLv3 Server_Hello request (smtp.rules) 2577 - WEB-CLIENT local resource redirection attempt (web-client.rules) 2580 - WEB-MISC server negative Content-Length attempt (web-misc.rules) 2589 - WEB-CLIENT Content-Disposition CLSID command attempt (web-client.rules) 2591 - DELETED SMTP From command overflow attempt (deleted.rules) 2592 - DELETED SMTP ReplyTo command overflow attempt (deleted.rules) 2593 - DELETED SMTP Sender command overflow attempt (deleted.rules) 2594 - DELETED SMTP To command overflow attempt (deleted.rules) 2595 - DELETED SMTP CC command overflow attempt (deleted.rules) 2596 - DELETED SMTP BCC command overflow attempt (deleted.rules) 2597 - WEB-MISC Samba SWAT Authorization overflow attempt (web-misc.rules) 2598 - WEB-MISC Samba SWAT Authorization port 901 overflow attempt (web-misc.rules) 2600 - DELETED ORACLE add_grouped_column ordered sname/oname buffer overflow attempt (deleted.rules) 2602 - DELETED ORACLE drop_master_repgroup ordered gname buffer overflow attempt (deleted.rules) 2604 - DELETED ORACLE create_mview_repgroup ordered fname buffer overflow attempt (deleted.rules) 2607 - DELETED ORACLE comment_on_repobject ordered type buffer overflow attempt (deleted.rules) 2610 - DELETED ORACLE cancel_statistics ordered sname/oname buffer overflow attempt (deleted.rules) 2613 - DELETED ORACLE revoke_surrogate_repcat ordered userid buffer overflow attempt (deleted.rules) 2616 - DELETED ORACLE grant_surrogate_repcat ordered userid buffer overflow attempt (deleted.rules) 2618 - DELETED ORACLE alter_mview_propagation ordered gname buffer overflow attempt (deleted.rules) 2620 - DELETED ORACLE alter_master_repobject ordered type buffer overflow attempt (deleted.rules) 2625 - DELETED ORACLE unregister_user_repgroup ordered privilege_type buffer overflow attempt (deleted.rules) 2628 - DELETED ORACLE repcat_import_check ordered gowner/gname buffer overflow attempt (deleted.rules) 2630 - DELETED ORACLE register_user_repgroup ordered privilege_type buffer overflow attempt (deleted.rules) 2632 - DELETED ORACLE refresh_mview_repgroup ordered gowner buffer overflow attempt (deleted.rules) 2634 - DELETED ORACLE rectifier_diff ordered sname1 buffer overflow attempt (deleted.rules) 2636 - DELETED ORACLE snapshot.end_load ordered gname buffer overflow attempt (deleted.rules) 2638 - DELETED ORACLE drop_master_repobject ordered type buffer overflow attempt (deleted.rules) 2640 - DELETED ORACLE drop_mview_repgroup ordered gowner/gname buffer overflow attempt (deleted.rules) 2642 - DELETED ORACLE drop_site_instantiation ordered refresh_template_name buffer overflow attempt (deleted.rules) 2646 - DELETED ORACLE instantiate_offline ordered refresh_template_name buffer overflow attempt (deleted.rules) 2648 - DELETED ORACLE instantiate_online ordered refresh_template_name buffer overflow attempt (deleted.rules) 2653 - DELETED ORACLE og.begin_load ordered gname buffer overflow attempt (deleted.rules) 2671 - WEB-CLIENT bitmap BitmapOffset integer overflow attempt (web-client.rules) 2705 - WEB-CLIENT JPEG parser heap overflow attempt (web-client.rules) 2706 - WEB-CLIENT JPEG transfer (web-client.rules) 2940 - NETBIOS SMB winreg alter context attempt (netbios.rules) 2941 - NETBIOS SMB winreg unicode alter context attempt (netbios.rules) 2942 - NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX attempt (netbios.rules) 2943 - NETBIOS SMB winreg InitiateSystemShutdown unicode attempt (netbios.rules) 2944 - NETBIOS SMB winreg InitiateSystemShutdown little endian attempt (netbios.rules) 2945 - NETBIOS SMB-DS winreg InitiateSystemShutdown attempt (netbios.rules) 2984 - NETBIOS SMB-DS winreg little endian bind attempt (netbios.rules) 2985 - NETBIOS SMB-DS winreg WriteAndX little endian bind attempt (netbios.rules) 2986 - NETBIOS SMB-DS winreg unicode little endian bind attempt (netbios.rules) 2987 - NETBIOS SMB-DS winreg WriteAndX unicode little endian bind attempt (netbios.rules) 2988 - NETBIOS SMB-DS winreg alter context attempt (netbios.rules) 2989 - NETBIOS SMB-DS winreg WriteAndX alter context attempt (netbios.rules) 2990 - NETBIOS SMB-DS winreg unicode alter context attempt (netbios.rules) 2991 - NETBIOS SMB-DS winreg WriteAndX unicode alter context attempt (netbios.rules) 2992 - NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX unicode little endian attempt (netbios.rules) 2993 - NETBIOS SMB-DS winreg InitiateSystemShutdown little endian attempt (netbios.rules) 2994 - NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX attempt (netbios.rules) 2995 - NETBIOS SMB v4 winreg InitiateSystemShutdown unicode attempt (netbios.rules) 2996 - NETBIOS SMB v4 winreg InitiateSystemShutdown unicode little endian attempt (netbios.rules) 2997 - NETBIOS SMB winreg InitiateSystemShutdown WriteAndX unicode little endian attempt (netbios.rules) 2998 - NETBIOS SMB winreg InitiateSystemShutdown WriteAndX little endian attempt (netbios.rules) 2999 - NETBIOS SMB-DS v4 winreg InitiateSystemShutdown unicode attempt (netbios.rules) 3060 - DELETED WEB-MISC TLS1 Client_Hello with pad via SSLv2 handshake request (deleted.rules) 3090 - NETBIOS SMB-DS llsrpc little endian bind attempt (netbios.rules) 3091 - NETBIOS SMB llsrpc little endian bind attempt (netbios.rules) 3092 - NETBIOS SMB-DS llsrpc WriteAndX unicode bind attempt (netbios.rules) 3093 - NETBIOS SMB-DS llsrpc WriteAndX unicode little endian bind attempt (netbios.rules) 3094 - NETBIOS SMB llsrpc WriteAndX unicode little endian bind attempt (netbios.rules) 3095 - NETBIOS SMB llsrpc WriteAndX bind attempt (netbios.rules) 3096 - NETBIOS SMB-DS llsrpc WriteAndX little endian bind attempt (netbios.rules) 3097 - NETBIOS SMB-DS llsrpc unicode alter context attempt (netbios.rules) 3098 - NETBIOS SMB-DS llsrpc unicode little endian alter context attempt (netbios.rules) 3099 - NETBIOS SMB-DS llsrpc unicode little endian bind attempt (netbios.rules) 3100 - NETBIOS SMB-DS llsrpc bind attempt (netbios.rules) 3101 - NETBIOS SMB-DS llsrpc unicode bind attempt (netbios.rules) 3102 - NETBIOS SMB llsrpc unicode little endian bind attempt (netbios.rules) 3103 - NETBIOS SMB llsrpc WriteAndX little endian bind attempt (netbios.rules) 3104 - NETBIOS SMB llsrpc alter context attempt (netbios.rules) 3105 - NETBIOS SMB-DS llsrpc WriteAndX alter context attempt (netbios.rules) 3106 - NETBIOS SMB llsrpc unicode alter context attempt (netbios.rules) 3107 - NETBIOS SMB llsrpc WriteAndX unicode alter context attempt (netbios.rules) 3108 - NETBIOS SMB-DS llsrpc alter context attempt (netbios.rules) 3109 - NETBIOS SMB llsrpc WriteAndX alter context attempt (netbios.rules) 3110 - NETBIOS SMB-DS llsrpc WriteAndX unicode alter context attempt (netbios.rules) 3111 - NETBIOS SMB llsrpc WriteAndX unicode little endian alter context attempt (netbios.rules) 3112 - NETBIOS SMB-DS llsrpc WriteAndX little endian alter context attempt (netbios.rules) 3113 - NETBIOS SMB llsrpc unicode little endian alter context attempt (netbios.rules) 3114 - NETBIOS SMB v4 llsrpc LlsrConnect overflow attempt (netbios.rules) 3115 - NETBIOS SMB-DS llsrpc LlsrConnect WriteAndX unicode overflow attempt (netbios.rules) 3116 - NETBIOS SMB-DS llsrpc LlsrConnect WriteAndX little endian overflow attempt (netbios.rules) 3117 - NETBIOS SMB llsrpc LlsrConnect WriteAndX little endian overflow attempt (netbios.rules) 3118 - NETBIOS SMB-DS llsrpc LlsrConnect unicode overflow attempt (netbios.rules) 3119 - NETBIOS SMB-DS llsrpc LlsrConnect overflow attempt (netbios.rules) 3120 - NETBIOS SMB llsrpc LlsrConnect overflow attempt (netbios.rules) 3121 - NETBIOS SMB-DS llsrpc LlsrConnect WriteAndX unicode little endian overflow attempt (netbios.rules) 3122 - NETBIOS SMB llsrpc LlsrConnect little endian overflow attempt (netbios.rules) 3123 - NETBIOS SMB llsrpc LlsrConnect unicode overflow attempt (netbios.rules) 3124 - NETBIOS SMB llsrpc LlsrConnect WriteAndX unicode little endian overflow attempt (netbios.rules) 3125 - NETBIOS SMB-DS llsrpc LlsrConnect WriteAndX overflow attempt (netbios.rules) 3126 - NETBIOS SMB llsrpc LlsrConnect WriteAndX overflow attempt (netbios.rules) 3127 - NETBIOS SMB-DS llsrpc LlsrConnect little endian overflow attempt (netbios.rules) 3128 - NETBIOS SMB-DS v4 llsrpc LlsrConnect little endian overflow attempt (netbios.rules) 3129 - NETBIOS SMB v4 llsrpc LlsrConnect WriteAndX overflow attempt (netbios.rules) 3202 - NETBIOS SMB winreg little endian alter context attempt (netbios.rules) 3203 - NETBIOS SMB winreg WriteAndX little endian alter context attempt (netbios.rules) 3204 - NETBIOS SMB winreg unicode little endian alter context attempt (netbios.rules) 3205 - NETBIOS SMB winreg WriteAndX unicode little endian alter context attempt (netbios.rules) 3206 - NETBIOS SMB-DS winreg little endian alter context attempt (netbios.rules) 3207 - NETBIOS SMB-DS winreg WriteAndX little endian alter context attempt (netbios.rules) 3208 - NETBIOS SMB-DS winreg unicode little endian alter context attempt (netbios.rules) 3209 - NETBIOS SMB-DS winreg WriteAndX unicode little endian alter context attempt (netbios.rules) 3210 - NETBIOS SMB winreg bind attempt (netbios.rules) 3211 - NETBIOS SMB winreg unicode bind attempt (netbios.rules) 3212 - NETBIOS SMB winreg WriteAndX bind attempt (netbios.rules) 3213 - NETBIOS SMB winreg WriteAndX unicode bind attempt (netbios.rules) 3214 - NETBIOS SMB-DS winreg bind attempt (netbios.rules) 3215 - NETBIOS SMB-DS winreg WriteAndX bind attempt (netbios.rules) 3216 - NETBIOS SMB-DS winreg unicode bind attempt (netbios.rules) 3217 - NETBIOS SMB-DS winreg WriteAndX unicode bind attempt (netbios.rules) 3218 - NETBIOS SMB winreg OpenKey WriteAndX unicode overflow attempt (netbios.rules) 3219 - NETBIOS SMB-DS winreg OpenKey WriteAndX little endian overflow attempt (netbios.rules) 3220 - NETBIOS SMB winreg OpenKey overflow attempt (netbios.rules) 3221 - NETBIOS SMB-DS winreg OpenKey WriteAndX unicode little endian overflow attempt (netbios.rules) 3222 - NETBIOS SMB winreg OpenKey WriteAndX little endian overflow attempt (netbios.rules) 3223 - NETBIOS SMB winreg OpenKey little endian overflow attempt (netbios.rules) 3224 - NETBIOS SMB-DS winreg OpenKey little endian overflow attempt (netbios.rules) 3225 - NETBIOS SMB-DS winreg OpenKey unicode overflow attempt (netbios.rules) 3226 - NETBIOS SMB winreg OpenKey WriteAndX unicode little endian overflow attempt (netbios.rules) 3227 - NETBIOS SMB-DS winreg OpenKey WriteAndX unicode overflow attempt (netbios.rules) 3228 - NETBIOS SMB-DS winreg OpenKey unicode little endian overflow attempt (netbios.rules) 3229 - NETBIOS SMB-DS winreg OpenKey WriteAndX overflow attempt (netbios.rules) 3230 - NETBIOS SMB v4 winreg OpenKey unicode overflow attempt (netbios.rules) 3231 - NETBIOS SMB v4 winreg OpenKey unicode little endian overflow attempt (netbios.rules) 3232 - NETBIOS SMB winreg OpenKey WriteAndX overflow attempt (netbios.rules) 3233 - NETBIOS SMB winreg OpenKey unicode little endian overflow attempt (netbios.rules) 3236 - NETBIOS DCERPC NCACN-IP-TCP irot alter context attempt (netbios.rules) 3237 - NETBIOS DCERPC NCADG-IP-UDP irot alter context attempt (netbios.rules) 3238 - NETBIOS DCERPC NCACN-IP-TCP v4 irot IrotIsRunning overflow attempt (netbios.rules) 3239 - NETBIOS DCERPC NCACN-IP-TCP v4 irot IrotIsRunning little endian overflow attempt (netbios.rules) 3240 - NETBIOS DCERPC NCACN-IP-TCP irot little endian alter context attempt (netbios.rules) 3241 - NETBIOS DCERPC NCADG-IP-UDP irot little endian alter context attempt (netbios.rules) 3242 - NETBIOS DCERPC NCACN-IP-TCP irot bind attempt (netbios.rules) 3243 - NETBIOS DCERPC NCADG-IP-UDP irot bind attempt (netbios.rules) 3244 - NETBIOS DCERPC NCACN-IP-TCP irot little endian bind attempt (netbios.rules) 3245 - NETBIOS DCERPC NCADG-IP-UDP irot little endian bind attempt (netbios.rules) 3246 - DELETED NETBIOS SMB irot unicode andx bind attempt (deleted.rules) 3247 - DELETED NETBIOS SMB irot unicode little endian andx bind attempt (deleted.rules) 3248 - DELETED NETBIOS SMB-DS irot bind attempt (deleted.rules) 3249 - DELETED NETBIOS SMB-DS irot little endian bind attempt (deleted.rules) 3250 - DELETED NETBIOS SMB-DS irot unicode bind attempt (deleted.rules) 3251 - DELETED NETBIOS SMB-DS irot unicode little endian bind attempt (deleted.rules) 3252 - DELETED NETBIOS SMB-DS irot andx bind attempt (deleted.rules) 3253 - DELETED NETBIOS SMB-DS irot little endian andx bind attempt (deleted.rules) 3254 - DELETED NETBIOS SMB-DS irot unicode andx bind attempt (deleted.rules) 3255 - DELETED NETBIOS SMB-DS irot unicode little endian andx bind attempt (deleted.rules) 3256 - NETBIOS DCERPC NCADG-IP-UDP v4 irot IrotIsRunning overflow attempt (netbios.rules) 3257 - NETBIOS DCERPC NCADG-IP-UDP v4 irot IrotIsRunning little endian overflow attempt (netbios.rules) 3258 - NETBIOS DCERPC NCACN-IP-TCP irot IrotIsRunning overflow attempt (netbios.rules) 3259 - NETBIOS DCERPC NCACN-IP-TCP irot IrotIsRunning little endian overflow attempt (netbios.rules) 3260 - NETBIOS DCERPC NCADG-IP-UDP irot IrotIsRunning overflow attempt (netbios.rules) 3261 - NETBIOS DCERPC NCADG-IP-UDP irot IrotIsRunning little endian overflow attempt (netbios.rules) 3262 - DELETED NETBIOS SMB IrotIsRunning unicode andx attempt (deleted.rules) 3263 - DELETED NETBIOS SMB IrotIsRunning unicode little endian andx attempt (deleted.rules) 3264 - DELETED NETBIOS SMB-DS IrotIsRunning attempt (deleted.rules) 3265 - DELETED NETBIOS SMB-DS IrotIsRunning little endian attempt (deleted.rules) 3266 - DELETED NETBIOS SMB-DS IrotIsRunning unicode attempt (deleted.rules) 3267 - DELETED NETBIOS SMB-DS IrotIsRunning unicode little endian attempt (deleted.rules) 3268 - DELETED NETBIOS SMB-DS IrotIsRunning andx attempt (deleted.rules) 3269 - DELETED NETBIOS SMB-DS IrotIsRunning little endian andx attempt (deleted.rules) 3270 - DELETED NETBIOS SMB-DS IrotIsRunning unicode andx attempt (deleted.rules) 3271 - DELETED NETBIOS SMB-DS IrotIsRunning unicode little endian andx attempt (deleted.rules) 3466 - WEB-MISC Authorization Basic overflow attempt (web-misc.rules) 3473 - WEB-CLIENT RealPlayer SMIL file overflow attempt (web-client.rules) 3523 - FTP SITE INDEX format string attempt (ftp.rules) 3534 - WEB-CLIENT Mozilla GIF heap overflow (web-client.rules) 3535 - WEB-CLIENT GIF transfer (web-client.rules) 3542 - MS-SQL SA brute force login attempt (sql.rules) 3548 - WEB-MISC TrackerCam negative Content-Length attempt (web-misc.rules) 3632 - WEB-CLIENT Mozilla bitmap width integer overflow attempt (web-client.rules) 3633 - WEB-CLIENT bitmap transfer (web-client.rules) 3684 - WEB-CLIENT Bitmap Transfer (web-client.rules) 3701 - DELETED NETBIOS DCERPC NCACN-IP-TCP veritas alter context attempt (deleted.rules) 3702 - DELETED NETBIOS DCERPC NCACN-IP-TCP veritas bind attempt (deleted.rules) 3703 - DELETED NETBIOS DCERPC NCACN-IP-TCP veritas little endian alter context attempt (deleted.rules) 3704 - DELETED NETBIOS DCERPC NCACN-IP-TCP veritas little endian bind attempt (deleted.rules) 3705 - DELETED NETBIOS SMB veritas WriteAndX alter context attempt (deleted.rules) 3706 - DELETED NETBIOS SMB veritas WriteAndX andx alter context attempt (deleted.rules) 3707 - DELETED NETBIOS SMB veritas WriteAndX andx bind attempt (deleted.rules) 3708 - DELETED NETBIOS SMB veritas WriteAndX bind attempt (deleted.rules) 3709 - DELETED NETBIOS SMB veritas WriteAndX little endian alter context attempt (deleted.rules) 3710 - DELETED NETBIOS SMB veritas WriteAndX little endian andx alter context attempt (deleted.rules) 3711 - DELETED NETBIOS SMB veritas WriteAndX little endian andx bind attempt (deleted.rules) 3712 - DELETED NETBIOS SMB veritas WriteAndX little endian bind attempt (deleted.rules) 3713 - DELETED NETBIOS SMB veritas WriteAndX unicode alter context attempt (deleted.rules) 3714 - DELETED NETBIOS SMB veritas WriteAndX unicode andx alter context attempt (deleted.rules) 3715 - DELETED NETBIOS SMB veritas WriteAndX unicode andx bind attempt (deleted.rules) 3716 - DELETED NETBIOS SMB veritas WriteAndX unicode bind attempt (deleted.rules) 3717 - DELETED NETBIOS SMB veritas WriteAndX unicode little endian alter context attempt (deleted.rules) 3718 - DELETED NETBIOS SMB veritas WriteAndX unicode little endian andx alter context attempt (deleted.rules) 3719 - DELETED NETBIOS SMB veritas WriteAndX unicode little endian andx bind attempt (deleted.rules) 3720 - DELETED NETBIOS SMB veritas WriteAndX unicode little endian bind attempt (deleted.rules) 3721 - DELETED NETBIOS SMB veritas alter context attempt (deleted.rules) 3722 - DELETED NETBIOS SMB veritas andx alter context attempt (deleted.rules) 3723 - DELETED NETBIOS SMB veritas andx bind attempt (deleted.rules) 3724 - DELETED NETBIOS SMB veritas bind attempt (deleted.rules) 3725 - DELETED NETBIOS SMB veritas little endian alter context attempt (deleted.rules) 3726 - DELETED NETBIOS SMB veritas little endian andx alter context attempt (deleted.rules) 3727 - DELETED NETBIOS SMB veritas little endian andx bind attempt (deleted.rules) 3728 - DELETED NETBIOS SMB veritas little endian bind attempt (deleted.rules) 3729 - DELETED NETBIOS SMB veritas unicode alter context attempt (deleted.rules) 3730 - DELETED NETBIOS SMB veritas unicode andx alter context attempt (deleted.rules) 3731 - DELETED NETBIOS SMB veritas unicode andx bind attempt (deleted.rules) 3732 - DELETED NETBIOS SMB veritas unicode bind attempt (deleted.rules) 3733 - DELETED NETBIOS SMB veritas unicode little endian alter context attempt (deleted.rules) 3734 - DELETED NETBIOS SMB veritas unicode little endian andx alter context attempt (deleted.rules) 3735 - DELETED NETBIOS SMB veritas unicode little endian andx bind attempt (deleted.rules) 3736 - DELETED NETBIOS SMB veritas unicode little endian bind attempt (deleted.rules) 3737 - DELETED NETBIOS SMB-DS veritas WriteAndX alter context attempt (deleted.rules) 3738 - DELETED NETBIOS SMB-DS veritas WriteAndX andx alter context attempt (deleted.rules) 3739 - DELETED NETBIOS SMB-DS veritas WriteAndX andx bind attempt (deleted.rules) 3740 - DELETED NETBIOS SMB-DS veritas WriteAndX bind attempt (deleted.rules) 3741 - DELETED NETBIOS SMB-DS veritas WriteAndX little endian alter context attempt (deleted.rules) 3742 - DELETED NETBIOS SMB-DS veritas WriteAndX little endian andx alter context attempt (deleted.rules) 3743 - DELETED NETBIOS SMB-DS veritas WriteAndX little endian andx bind attempt (deleted.rules) 3744 - DELETED NETBIOS SMB-DS veritas WriteAndX little endian bind attempt (deleted.rules) 3745 - DELETED NETBIOS SMB-DS veritas WriteAndX unicode alter context attempt (deleted.rules) 3746 - DELETED NETBIOS SMB-DS veritas WriteAndX unicode andx alter context attempt (deleted.rules) 3747 - DELETED NETBIOS SMB-DS veritas WriteAndX unicode andx bind attempt (deleted.rules) 3748 - DELETED NETBIOS SMB-DS veritas WriteAndX unicode bind attempt (deleted.rules) 3749 - DELETED NETBIOS SMB-DS veritas WriteAndX unicode little endian alter context attempt (deleted.rules) 3750 - DELETED NETBIOS SMB-DS veritas WriteAndX unicode little endian andx alter context attempt (deleted.rules) 3751 - DELETED NETBIOS SMB-DS veritas WriteAndX unicode little endian andx bind attempt (deleted.rules) 3752 - DELETED NETBIOS SMB-DS veritas WriteAndX unicode little endian bind attempt (deleted.rules) 3753 - DELETED NETBIOS SMB-DS veritas alter context attempt (deleted.rules) 3754 - DELETED NETBIOS SMB-DS veritas andx alter context attempt (deleted.rules) 3755 - DELETED NETBIOS SMB-DS veritas andx bind attempt (deleted.rules) 3756 - DELETED NETBIOS SMB-DS veritas bind attempt (deleted.rules) 3757 - DELETED NETBIOS SMB-DS veritas little endian alter context attempt (deleted.rules) 3758 - DELETED NETBIOS SMB-DS veritas little endian andx alter context attempt (deleted.rules) 3759 - DELETED NETBIOS SMB-DS veritas little endian andx bind attempt (deleted.rules) 3760 - DELETED NETBIOS SMB-DS veritas little endian bind attempt (deleted.rules) 3761 - DELETED NETBIOS SMB-DS veritas unicode alter context attempt (deleted.rules) 3762 - DELETED NETBIOS SMB-DS veritas unicode andx alter context attempt (deleted.rules) 3763 - DELETED NETBIOS SMB-DS veritas unicode andx bind attempt (deleted.rules) 3764 - DELETED NETBIOS SMB-DS veritas unicode bind attempt (deleted.rules) 3765 - DELETED NETBIOS SMB-DS veritas unicode little endian alter context attempt (deleted.rules) 3766 - DELETED NETBIOS SMB-DS veritas unicode little endian andx alter context attempt (deleted.rules) 3767 - DELETED NETBIOS SMB-DS veritas unicode little endian andx bind attempt (deleted.rules) 3768 - DELETED NETBIOS SMB-DS veritas unicode little endian bind attempt (deleted.rules) 3769 - DELETED NETBIOS DCERPC NCACN-HTTP veritas alter context attempt (deleted.rules) 3770 - DELETED NETBIOS DCERPC NCACN-HTTP veritas bind attempt (deleted.rules) 3771 - DELETED NETBIOS DCERPC NCACN-HTTP veritas little endian alter context attempt (deleted.rules) 3772 - DELETED NETBIOS DCERPC NCACN-HTTP veritas little endian bind attempt (deleted.rules) 3773 - DELETED NETBIOS DCERPC DIRECT-UDP veritas alter context attempt (deleted.rules) 3774 - DELETED NETBIOS DCERPC DIRECT-UDP veritas bind attempt (deleted.rules) 3775 - DELETED NETBIOS DCERPC DIRECT-UDP veritas little endian alter context attempt (deleted.rules) 3776 - DELETED NETBIOS DCERPC DIRECT-UDP veritas little endian bind attempt (deleted.rules) 3777 - DELETED NETBIOS DCERPC NCADG-IP-UDP veritas alter context attempt (deleted.rules) 3778 - DELETED NETBIOS DCERPC NCADG-IP-UDP veritas bind attempt (deleted.rules) 3779 - DELETED NETBIOS DCERPC NCADG-IP-UDP veritas little endian alter context attempt (deleted.rules) 3780 - DELETED NETBIOS DCERPC NCADG-IP-UDP veritas little endian bind attempt (deleted.rules) 3781 - DELETED NETBIOS-DG SMB veritas WriteAndX alter context attempt (deleted.rules) 3782 - DELETED NETBIOS-DG SMB veritas WriteAndX andx alter context attempt (deleted.rules) 3783 - DELETED NETBIOS-DG SMB veritas WriteAndX andx bind attempt (deleted.rules) 3784 - DELETED NETBIOS-DG SMB veritas WriteAndX bind attempt (deleted.rules) 3785 - DELETED NETBIOS-DG SMB veritas WriteAndX little endian alter context attempt (deleted.rules) 3786 - DELETED NETBIOS-DG SMB veritas WriteAndX little endian andx alter context attempt (deleted.rules) 3787 - DELETED NETBIOS-DG SMB veritas WriteAndX little endian andx bind attempt (deleted.rules) 3788 - DELETED NETBIOS-DG SMB veritas WriteAndX little endian bind attempt (deleted.rules) 3789 - DELETED NETBIOS-DG SMB veritas WriteAndX unicode alter context attempt (deleted.rules) 3790 - DELETED NETBIOS-DG SMB veritas WriteAndX unicode andx alter context attempt (deleted.rules) 3791 - DELETED NETBIOS-DG SMB veritas WriteAndX unicode andx bind attempt (deleted.rules) 3792 - DELETED NETBIOS-DG SMB veritas WriteAndX unicode bind attempt (deleted.rules) 3793 - DELETED NETBIOS-DG SMB veritas WriteAndX unicode little endian alter context attempt (deleted.rules) 3794 - DELETED NETBIOS-DG SMB veritas WriteAndX unicode little endian andx alter context attempt (deleted.rules) 3795 - DELETED NETBIOS-DG SMB veritas WriteAndX unicode little endian andx bind attempt (deleted.rules) 3796 - DELETED NETBIOS-DG SMB veritas WriteAndX unicode little endian bind attempt (deleted.rules) 3797 - DELETED NETBIOS-DG SMB veritas alter context attempt (deleted.rules) 3798 - DELETED NETBIOS-DG SMB veritas andx alter context attempt (deleted.rules) 3799 - DELETED NETBIOS-DG SMB veritas andx bind attempt (deleted.rules) 3800 - DELETED NETBIOS-DG SMB veritas bind attempt (deleted.rules) 3801 - DELETED NETBIOS-DG SMB veritas little endian alter context attempt (deleted.rules) 3802 - DELETED NETBIOS-DG SMB veritas little endian andx alter context attempt (deleted.rules) 3803 - DELETED NETBIOS-DG SMB veritas little endian andx bind attempt (deleted.rules) 3804 - DELETED NETBIOS-DG SMB veritas little endian bind attempt (deleted.rules) 3805 - DELETED NETBIOS-DG SMB veritas unicode alter context attempt (deleted.rules) 3806 - DELETED NETBIOS-DG SMB veritas unicode andx alter context attempt (deleted.rules) 3807 - DELETED NETBIOS-DG SMB veritas unicode andx bind attempt (deleted.rules) 3808 - DELETED NETBIOS-DG SMB veritas unicode bind attempt (deleted.rules) 3809 - DELETED NETBIOS-DG SMB veritas unicode little endian alter context attempt (deleted.rules) 3810 - DELETED NETBIOS-DG SMB veritas unicode little endian andx alter context attempt (deleted.rules) 3811 - DELETED NETBIOS-DG SMB veritas unicode little endian andx bind attempt (deleted.rules) 3812 - DELETED NETBIOS-DG SMB veritas unicode little endian bind attempt (deleted.rules) 3819 - WEB-CLIENT multipacket CHM file transfer start (web-client.rules) 3821 - WEB-CLIENT CHM file transfer attempt (web-client.rules) 3892 - DELETED NETBIOS SMB-DS umpnpmgr unicode alter context attempt (deleted.rules) 3893 - DELETED NETBIOS SMB-DS umpnpmgr unicode andx alter context attempt (deleted.rules) 3894 - DELETED NETBIOS SMB-DS umpnpmgr unicode andx bind attempt (deleted.rules) 3895 - DELETED NETBIOS SMB-DS umpnpmgr unicode bind attempt (deleted.rules) 3896 - DELETED NETBIOS SMB-DS umpnpmgr unicode little endian alter context attempt (deleted.rules) 3897 - DELETED NETBIOS SMB-DS umpnpmgr unicode little endian andx alter context attempt (deleted.rules) 3898 - DELETED NETBIOS SMB-DS umpnpmgr unicode little endian andx bind attempt (deleted.rules) 3899 - DELETED NETBIOS SMB-DS umpnpmgr unicode little endian bind attempt (deleted.rules) 3900 - DELETED NETBIOS DCERPC NCACN-HTTP umpnpmgr alter context attempt (deleted.rules) 3901 - DELETED NETBIOS DCERPC NCACN-HTTP umpnpmgr bind attempt (deleted.rules) 3902 - DELETED NETBIOS DCERPC NCACN-HTTP umpnpmgr little endian alter context attempt (deleted.rules) 3903 - DELETED NETBIOS DCERPC NCACN-HTTP umpnpmgr little endian bind attempt (deleted.rules) 3904 - DELETED NETBIOS DCERPC DIRECT-UDP umpnpmgr alter context attempt (deleted.rules) 3905 - DELETED NETBIOS DCERPC DIRECT-UDP umpnpmgr bind attempt (deleted.rules) 3906 - DELETED NETBIOS DCERPC DIRECT-UDP umpnpmgr little endian alter context attempt (deleted.rules) 3907 - DELETED NETBIOS DCERPC DIRECT-UDP umpnpmgr little endian bind attempt (deleted.rules) 3908 - DELETED NETBIOS DCERPC NCADG-IP-UDP umpnpmgr alter context attempt (deleted.rules) 3909 - DELETED NETBIOS DCERPC NCADG-IP-UDP umpnpmgr bind attempt (deleted.rules) 3910 - DELETED NETBIOS DCERPC NCADG-IP-UDP umpnpmgr little endian alter context attempt (deleted.rules) 3911 - DELETED NETBIOS DCERPC NCADG-IP-UDP umpnpmgr little endian bind attempt (deleted.rules) 3912 - DELETED NETBIOS-DG SMB umpnpmgr WriteAndX alter context attempt (deleted.rules) 3913 - DELETED NETBIOS-DG SMB umpnpmgr WriteAndX andx alter context attempt (deleted.rules) 3914 - DELETED NETBIOS-DG SMB umpnpmgr WriteAndX andx bind attempt (deleted.rules) 3915 - DELETED NETBIOS-DG SMB umpnpmgr WriteAndX bind attempt (deleted.rules) 3916 - DELETED NETBIOS-DG SMB umpnpmgr WriteAndX little endian alter context attempt (deleted.rules) 3917 - DELETED NETBIOS-DG SMB umpnpmgr WriteAndX little endian andx alter context attempt (deleted.rules) 3918 - DELETED NETBIOS-DG SMB umpnpmgr WriteAndX little endian andx bind attempt (deleted.rules) 3919 - DELETED NETBIOS-DG SMB umpnpmgr WriteAndX little endian bind attempt (deleted.rules) 3920 - DELETED NETBIOS-DG SMB umpnpmgr WriteAndX unicode alter context attempt (deleted.rules) 3921 - DELETED NETBIOS-DG SMB umpnpmgr WriteAndX unicode andx alter context attempt (deleted.rules) 3922 - DELETED NETBIOS-DG SMB umpnpmgr WriteAndX unicode andx bind attempt (deleted.rules) 3923 - DELETED NETBIOS-DG SMB umpnpmgr WriteAndX unicode bind attempt (deleted.rules) 3924 - DELETED NETBIOS-DG SMB umpnpmgr WriteAndX unicode little endian alter context attempt (deleted.rules) 3925 - DELETED NETBIOS-DG SMB umpnpmgr WriteAndX unicode little endian andx alter context attempt (deleted.rules) 3926 - DELETED NETBIOS-DG SMB umpnpmgr WriteAndX unicode little endian andx bind attempt (deleted.rules) 3927 - DELETED NETBIOS-DG SMB umpnpmgr WriteAndX unicode little endian bind attempt (deleted.rules) 3928 - DELETED NETBIOS-DG SMB umpnpmgr alter context attempt (deleted.rules) 3929 - DELETED NETBIOS-DG SMB umpnpmgr andx alter context attempt (deleted.rules) 3930 - DELETED NETBIOS-DG SMB umpnpmgr andx bind attempt (deleted.rules) 3931 - DELETED NETBIOS-DG SMB umpnpmgr bind attempt (deleted.rules) 3932 - DELETED NETBIOS-DG SMB umpnpmgr little endian alter context attempt (deleted.rules) 3933 - DELETED NETBIOS-DG SMB umpnpmgr little endian andx alter context attempt (deleted.rules) 3934 - DELETED NETBIOS-DG SMB umpnpmgr little endian andx bind attempt (deleted.rules) 3935 - DELETED NETBIOS-DG SMB umpnpmgr little endian bind attempt (deleted.rules) 3936 - DELETED NETBIOS-DG SMB umpnpmgr unicode alter context attempt (deleted.rules) 3937 - DELETED NETBIOS-DG SMB umpnpmgr unicode andx alter context attempt (deleted.rules) 3938 - DELETED NETBIOS-DG SMB umpnpmgr unicode andx bind attempt (deleted.rules) 3939 - DELETED NETBIOS-DG SMB umpnpmgr unicode bind attempt (deleted.rules) 3940 - DELETED NETBIOS-DG SMB umpnpmgr unicode little endian alter context attempt (deleted.rules) 3941 - DELETED NETBIOS-DG SMB umpnpmgr unicode little endian andx alter context attempt (deleted.rules) 3942 - DELETED NETBIOS-DG SMB umpnpmgr unicode little endian andx bind attempt (deleted.rules) 3943 - DELETED NETBIOS-DG SMB umpnpmgr unicode little endian bind attempt (deleted.rules) 3944 - DELETED NETBIOS DCERPC DIRECT umpnpmgr PNP_QueryResConfList attempt (deleted.rules) 3945 - DELETED NETBIOS DCERPC DIRECT umpnpmgr PNP_QueryResConfList little endian attempt (deleted.rules) 3946 - DELETED NETBIOS DCERPC DIRECT v4 umpnpmgr PNP_QueryResConfList attempt (deleted.rules) 3947 - DELETED NETBIOS DCERPC DIRECT v4 umpnpmgr PNP_QueryResConfList little endian attempt (deleted.rules) 3948 - DELETED NETBIOS DCERPC NCACN-IP-TCP umpnpmgr PNP_QueryResConfList attempt (deleted.rules) 3949 - DELETED NETBIOS DCERPC NCACN-IP-TCP umpnpmgr PNP_QueryResConfList little endian attempt (deleted.rules) 3950 - DELETED NETBIOS DCERPC NCACN-IP-TCP v4 umpnpmgr PNP_QueryResConfList attempt (deleted.rules) 3951 - DELETED NETBIOS DCERPC NCACN-IP-TCP v4 umpnpmgr PNP_QueryResConfList little endian attempt (deleted.rules) 4016 - DELETED NETBIOS DCERPC NCACN-HTTP umpnpmgr PNP_QueryResConfList attempt (deleted.rules) 4017 - DELETED NETBIOS DCERPC NCACN-HTTP umpnpmgr PNP_QueryResConfList little endian attempt (deleted.rules) 4018 - DELETED NETBIOS DCERPC NCACN-HTTP v4 umpnpmgr PNP_QueryResConfList attempt (deleted.rules) 4019 - DELETED NETBIOS DCERPC NCACN-HTTP v4 umpnpmgr PNP_QueryResConfList little endian attempt (deleted.rules) 4020 - DELETED NETBIOS DCERPC DIRECT-UDP umpnpmgr PNP_QueryResConfList attempt (deleted.rules) 4021 - DELETED NETBIOS DCERPC DIRECT-UDP umpnpmgr PNP_QueryResConfList little endian attempt (deleted.rules) 4022 - DELETED NETBIOS DCERPC DIRECT-UDP v4 umpnpmgr PNP_QueryResConfList attempt (deleted.rules) 4023 - DELETED NETBIOS DCERPC DIRECT-UDP v4 umpnpmgr PNP_QueryResConfList little endian attempt (deleted.rules) 4024 - DELETED NETBIOS DCERPC NCADG-IP-UDP umpnpmgr PNP_QueryResConfList attempt (deleted.rules) 4025 - DELETED NETBIOS DCERPC NCADG-IP-UDP umpnpmgr PNP_QueryResConfList little endian attempt (deleted.rules) 4026 - DELETED NETBIOS DCERPC NCADG-IP-UDP v4 umpnpmgr PNP_QueryResConfList attempt (deleted.rules) 4027 - DELETED NETBIOS DCERPC NCADG-IP-UDP v4 umpnpmgr PNP_QueryResConfList little endian attempt (deleted.rules) 4028 - DELETED NETBIOS-DG SMB umpnpmgr PNP_QueryResConfList WriteAndX andx attempt (deleted.rules) 4029 - DELETED NETBIOS-DG SMB umpnpmgr PNP_QueryResConfList WriteAndX attempt (deleted.rules) 4030 - DELETED NETBIOS-DG SMB umpnpmgr PNP_QueryResConfList WriteAndX little endian andx attempt (deleted.rules) 4031 - DELETED NETBIOS-DG SMB umpnpmgr PNP_QueryResConfList WriteAndX little endian attempt (deleted.rules) 4032 - DELETED NETBIOS-DG SMB umpnpmgr PNP_QueryResConfList WriteAndX unicode andx attempt (deleted.rules) 4033 - DELETED NETBIOS-DG SMB umpnpmgr PNP_QueryResConfList WriteAndX unicode attempt (deleted.rules) 4034 - DELETED NETBIOS-DG SMB umpnpmgr PNP_QueryResConfList WriteAndX unicode little endian andx attempt (deleted.rules) 4035 - DELETED NETBIOS-DG SMB umpnpmgr PNP_QueryResConfList WriteAndX unicode little endian attempt (deleted.rules) 4036 - DELETED NETBIOS-DG SMB umpnpmgr PNP_QueryResConfList andx attempt (deleted.rules) 4037 - DELETED NETBIOS-DG SMB umpnpmgr PNP_QueryResConfList attempt (deleted.rules) 4038 - DELETED NETBIOS-DG SMB umpnpmgr PNP_QueryResConfList little endian andx attempt (deleted.rules) 4039 - DELETED NETBIOS-DG SMB umpnpmgr PNP_QueryResConfList little endian attempt (deleted.rules) 4040 - DELETED NETBIOS-DG SMB umpnpmgr PNP_QueryResConfList unicode andx attempt (deleted.rules) 4041 - DELETED NETBIOS-DG SMB umpnpmgr PNP_QueryResConfList unicode attempt (deleted.rules) 4042 - DELETED NETBIOS-DG SMB umpnpmgr PNP_QueryResConfList unicode little endian andx attempt (deleted.rules) 4043 - DELETED NETBIOS-DG SMB umpnpmgr PNP_QueryResConfList unicode little endian attempt (deleted.rules) 4044 - DELETED NETBIOS-DG SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX andx attempt (deleted.rules) 4045 - DELETED NETBIOS-DG SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX attempt (deleted.rules) 4046 - DELETED NETBIOS-DG SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX little endian andx attempt (deleted.rules) 4047 - DELETED NETBIOS-DG SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX little endian attempt (deleted.rules) 4048 - DELETED NETBIOS-DG SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX unicode andx attempt (deleted.rules) 4049 - DELETED NETBIOS-DG SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX unicode attempt (deleted.rules) 4050 - DELETED NETBIOS-DG SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX unicode little endian andx attempt (deleted.rules) 4051 - DELETED NETBIOS-DG SMB v4 umpnpmgr PNP_QueryResConfList WriteAndX unicode little endian attempt (deleted.rules) 4052 - DELETED NETBIOS-DG SMB v4 umpnpmgr PNP_QueryResConfList andx attempt (deleted.rules) 4053 - DELETED NETBIOS-DG SMB v4 umpnpmgr PNP_QueryResConfList attempt (deleted.rules) 4054 - DELETED NETBIOS-DG SMB v4 umpnpmgr PNP_QueryResConfList little endian andx attempt (deleted.rules) 4055 - DELETED NETBIOS-DG SMB v4 umpnpmgr PNP_QueryResConfList little endian attempt (deleted.rules) 4056 - DELETED NETBIOS-DG SMB v4 umpnpmgr PNP_QueryResConfList unicode andx attempt (deleted.rules) 4057 - DELETED NETBIOS-DG SMB v4 umpnpmgr PNP_QueryResConfList unicode attempt (deleted.rules) 4058 - DELETED NETBIOS-DG SMB v4 umpnpmgr PNP_QueryResConfList unicode little endian andx attempt (deleted.rules) 4059 - DELETED NETBIOS-DG SMB v4 umpnpmgr PNP_QueryResConfList unicode little endian attempt (deleted.rules) 4125 - DELETED NETBIOS-DG SMB v4 umpnpmgr PNP_DetectResourceConflict unicode little endian andx attempt (deleted.rules) 4135 - WEB-CLIENT IE JPEG heap overflow single packet attempt (web-client.rules) 4149 - DELETED WEB-CLIENT HTML Help ActiveX Object Access (deleted.rules) 4166 - WEB-CLIENT Shell.Explorer ActiveX Object Access (web-client.rules) 4194 - WEB-CLIENT multipacket CBO CBL CBM file transfer start (web-client.rules) 4196 - WEB-CLIENT CBO CBL CBM file transfer attempt (web-client.rules) 4237 - NETBIOS DCERPC DIRECT msdtc alter context attempt (netbios.rules) 4238 - NETBIOS DCERPC DIRECT msdtc bind attempt (netbios.rules) 4239 - NETBIOS DCERPC DIRECT msdtc little endian alter context attempt (netbios.rules) 4240 - NETBIOS DCERPC DIRECT msdtc little endian bind attempt (netbios.rules) 4241 - NETBIOS DCERPC DIRECT-UDP msdtc alter context attempt (netbios.rules) 4242 - NETBIOS DCERPC DIRECT-UDP msdtc bind attempt (netbios.rules) 4243 - NETBIOS DCERPC DIRECT-UDP msdtc little endian alter context attempt (netbios.rules) 4244 - NETBIOS DCERPC DIRECT-UDP msdtc little endian bind attempt (netbios.rules) 4245 - NETBIOS DCERPC DIRECT msdtc BuildContextW little endian overflow attempt (netbios.rules) 4246 - NETBIOS DCERPC DIRECT msdtc BuildContextW overflow attempt (netbios.rules) 4247 - NETBIOS DCERPC DIRECT v4 msdtc BuildContextW little endian overflow attempt (netbios.rules) 4248 - NETBIOS DCERPC DIRECT v4 msdtc BuildContextW overflow attempt (netbios.rules) 4249 - NETBIOS DCERPC DIRECT-UDP msdtc BuildContextW little endian overflow attempt (netbios.rules) 4250 - NETBIOS DCERPC DIRECT-UDP msdtc BuildContextW overflow attempt (netbios.rules) 4251 - NETBIOS DCERPC DIRECT-UDP v4 msdtc BuildContextW little endian overflow attempt (netbios.rules) 4252 - NETBIOS DCERPC DIRECT-UDP v4 msdtc BuildContextW overflow attempt (netbios.rules) 4541 - NETBIOS SMB netware_cs function 43 WriteAndX andx overflow attempt (netbios.rules) 4542 - NETBIOS SMB netware_cs function 43 WriteAndX little endian andx overflow attempt (netbios.rules) 4543 - NETBIOS SMB netware_cs function 43 WriteAndX little endian overflow attempt (netbios.rules) 4544 - NETBIOS SMB netware_cs function 43 WriteAndX overflow attempt (netbios.rules) 4545 - NETBIOS SMB netware_cs function 43 WriteAndX unicode andx overflow attempt (netbios.rules) 4546 - NETBIOS SMB netware_cs function 43 WriteAndX unicode little endian andx overflow attempt (netbios.rules) 4547 - NETBIOS SMB netware_cs function 43 WriteAndX unicode little endian overflow attempt (netbios.rules) 4548 - NETBIOS SMB netware_cs function 43 WriteAndX unicode overflow attempt (netbios.rules) 4549 - NETBIOS SMB netware_cs function 43 andx overflow attempt (netbios.rules) 4550 - NETBIOS SMB netware_cs function 43 little endian andx overflow attempt (netbios.rules) 4551 - NETBIOS SMB netware_cs function 43 little endian overflow attempt (netbios.rules) 4552 - NETBIOS SMB netware_cs function 43 overflow attempt (netbios.rules) 4553 - NETBIOS SMB netware_cs function 43 unicode andx overflow attempt (netbios.rules) 4554 - NETBIOS SMB netware_cs function 43 unicode little endian andx overflow attempt (netbios.rules) 4555 - NETBIOS SMB netware_cs function 43 unicode little endian overflow attempt (netbios.rules) 4556 - NETBIOS SMB netware_cs function 43 unicode overflow attempt (netbios.rules) 4557 - NETBIOS SMB v4 netware_cs function 43 WriteAndX andx overflow attempt (netbios.rules) 4558 - NETBIOS SMB v4 netware_cs function 43 WriteAndX little endian andx overflow attempt (netbios.rules) 4559 - NETBIOS SMB v4 netware_cs function 43 WriteAndX little endian overflow attempt (netbios.rules) 4560 - NETBIOS SMB v4 netware_cs function 43 WriteAndX overflow attempt (netbios.rules) 4561 - NETBIOS SMB v4 netware_cs function 43 WriteAndX unicode andx overflow attempt (netbios.rules) 4562 - NETBIOS SMB v4 netware_cs function 43 WriteAndX unicode little endian andx overflow attempt (netbios.rules) 4563 - NETBIOS SMB v4 netware_cs function 43 WriteAndX unicode little endian overflow attempt (netbios.rules) 4564 - NETBIOS SMB v4 netware_cs function 43 WriteAndX unicode overflow attempt (netbios.rules) 4565 - NETBIOS SMB v4 netware_cs function 43 andx overflow attempt (netbios.rules) 4566 - NETBIOS SMB v4 netware_cs function 43 little endian andx overflow attempt (netbios.rules) 4567 - NETBIOS SMB v4 netware_cs function 43 little endian overflow attempt (netbios.rules) 4568 - NETBIOS SMB v4 netware_cs function 43 overflow attempt (netbios.rules) 4569 - NETBIOS SMB v4 netware_cs function 43 unicode andx overflow attempt (netbios.rules) 4570 - NETBIOS SMB v4 netware_cs function 43 unicode little endian andx overflow attempt (netbios.rules) 4571 - NETBIOS SMB v4 netware_cs function 43 unicode little endian overflow attempt (netbios.rules) 4572 - NETBIOS SMB v4 netware_cs function 43 unicode overflow attempt (netbios.rules) 4605 - NETBIOS SMB-DS netware_cs function 43 WriteAndX andx overflow attempt (netbios.rules) 4606 - NETBIOS SMB-DS netware_cs function 43 WriteAndX little endian andx overflow attempt (netbios.rules) 4607 - NETBIOS SMB-DS netware_cs function 43 WriteAndX little endian overflow attempt (netbios.rules) 4608 - NETBIOS SMB-DS netware_cs function 43 WriteAndX overflow attempt (netbios.rules) 4609 - NETBIOS SMB-DS netware_cs function 43 WriteAndX unicode andx overflow attempt (netbios.rules) 4610 - NETBIOS SMB-DS netware_cs function 43 WriteAndX unicode little endian andx overflow attempt (netbios.rules) 4611 - NETBIOS SMB-DS netware_cs function 43 WriteAndX unicode little endian overflow attempt (netbios.rules) 4612 - NETBIOS SMB-DS netware_cs function 43 WriteAndX unicode overflow attempt (netbios.rules) 4613 - NETBIOS SMB-DS netware_cs function 43 andx overflow attempt (netbios.rules) 4614 - NETBIOS SMB-DS netware_cs function 43 little endian andx overflow attempt (netbios.rules) 4615 - NETBIOS SMB-DS netware_cs function 43 little endian overflow attempt (netbios.rules) 4616 - NETBIOS SMB-DS netware_cs function 43 overflow attempt (netbios.rules) 4617 - NETBIOS SMB-DS netware_cs function 43 unicode andx overflow attempt (netbios.rules) 4618 - NETBIOS SMB-DS netware_cs function 43 unicode little endian andx overflow attempt (netbios.rules) 4619 - NETBIOS SMB-DS netware_cs function 43 unicode little endian overflow attempt (netbios.rules) 4620 - NETBIOS SMB-DS netware_cs function 43 unicode overflow attempt (netbios.rules) 4621 - NETBIOS SMB-DS v4 netware_cs function 43 WriteAndX andx overflow attempt (netbios.rules) 4622 - NETBIOS SMB-DS v4 netware_cs function 43 WriteAndX little endian andx overflow attempt (netbios.rules) 4623 - NETBIOS SMB-DS v4 netware_cs function 43 WriteAndX little endian overflow attempt (netbios.rules) 4624 - NETBIOS SMB-DS v4 netware_cs function 43 WriteAndX overflow attempt (netbios.rules) 4625 - NETBIOS SMB-DS v4 netware_cs function 43 WriteAndX unicode andx overflow attempt (netbios.rules) 4626 - NETBIOS SMB-DS v4 netware_cs function 43 WriteAndX unicode little endian andx overflow attempt (netbios.rules) 4627 - NETBIOS SMB-DS v4 netware_cs function 43 WriteAndX unicode little endian overflow attempt (netbios.rules) 4628 - NETBIOS SMB-DS v4 netware_cs function 43 WriteAndX unicode overflow attempt (netbios.rules) 4629 - NETBIOS SMB-DS v4 netware_cs function 43 andx overflow attempt (netbios.rules) 4630 - NETBIOS SMB-DS v4 netware_cs function 43 little endian andx overflow attempt (netbios.rules) 4631 - NETBIOS SMB-DS v4 netware_cs function 43 little endian overflow attempt (netbios.rules) 4632 - NETBIOS SMB-DS v4 netware_cs function 43 overflow attempt (netbios.rules) 4633 - NETBIOS SMB-DS v4 netware_cs function 43 unicode andx overflow attempt (netbios.rules) 4634 - NETBIOS SMB-DS v4 netware_cs function 43 unicode little endian andx overflow attempt (netbios.rules) 4635 - NETBIOS SMB-DS v4 netware_cs function 43 unicode little endian overflow attempt (netbios.rules) 4636 - NETBIOS SMB-DS v4 netware_cs function 43 unicode overflow attempt (netbios.rules) 4681 - WEB-MISC Symantec admin interface client negative Content-Length attempt (web-misc.rules) 5095 - NETBIOS SMB lsass DsRolerGetPrimaryDomainInformation attempt (netbios.rules) 5096 - NETBIOS SMB lsass DsRolerGetPrimaryDomainInformation WriteAndX little endian attempt (netbios.rules) 5097 - NETBIOS SMB-DS lsass DsRolerGetPrimaryDomainInformation WriteAndX little endian attempt (netbios.rules) 5098 - NETBIOS SMB v4 lsass DsRolerGetPrimaryDomainInformation little endian attempt (netbios.rules) 5099 - NETBIOS SMB-DS lsass DsRolerGetPrimaryDomainInformation little endian attempt (netbios.rules) 5104 - NETBIOS SMB-DS lsass DsRolerGetPrimaryDomainInformation attempt (netbios.rules) 5107 - NETBIOS SMB lsass DsRolerGetPrimaryDomainInformation little endian attempt (netbios.rules) 5109 - NETBIOS SMB-DS v4 lsass DsRolerGetPrimaryDomainInformation unicode attempt (netbios.rules) 5110 - NETBIOS SMB-DS lsass DsRolerGetPrimaryDomainInformation unicode little endian attempt (netbios.rules) 5112 - NETBIOS SMB-DS v4 lsass DsRolerGetPrimaryDomainInformation WriteAndX unicode attempt (netbios.rules) 5113 - NETBIOS SMB-DS lsass DsRolerGetPrimaryDomainInformation WriteAndX attempt (netbios.rules) 5115 - NETBIOS SMB-DS lsass DsRolerGetPrimaryDomainInformation unicode attempt (netbios.rules) 5116 - NETBIOS SMB lsass DsRolerGetPrimaryDomainInformation WriteAndX attempt (netbios.rules) 5117 - NETBIOS SMB lsass DsRolerGetPrimaryDomainInformation unicode attempt (netbios.rules) 5119 - NETBIOS SMB lsass DsRolerGetPrimaryDomainInformation unicode little endian attempt (netbios.rules) 5120 - NETBIOS SMB-DS lsass DsRolerGetPrimaryDomainInformation WriteAndX unicode attempt (netbios.rules) 5121 - NETBIOS SMB lsass DsRolerGetPrimaryDomainInformation WriteAndX unicode little endian attempt (netbios.rules) 5122 - NETBIOS SMB lsass DsRolerGetPrimaryDomainInformation WriteAndX unicode attempt (netbios.rules) 5123 - NETBIOS SMB-DS lsass DsRolerGetPrimaryDomainInformation WriteAndX unicode little endian attempt (netbios.rules) 5125 - NETBIOS SMB v4 lsass DsRolerGetPrimaryDomainInformation attempt (netbios.rules) 5126 - NETBIOS SMB-DS v4 lsass DsRolerGetPrimaryDomainInformation unicode little endian attempt (netbios.rules) 5128 - NETBIOS SMB-DS v4 lsass DsRolerGetPrimaryDomainInformation attempt (netbios.rules) 5129 - NETBIOS SMB v4 lsass DsRolerGetPrimaryDomainInformation WriteAndX attempt (netbios.rules) 5130 - NETBIOS SMB v4 lsass DsRolerGetPrimaryDomainInformation unicode attempt (netbios.rules) 5131 - NETBIOS SMB v4 lsass DsRolerGetPrimaryDomainInformation WriteAndX unicode attempt (netbios.rules) 5132 - NETBIOS SMB-DS v4 lsass DsRolerGetPrimaryDomainInformation WriteAndX attempt (netbios.rules) 5136 - NETBIOS SMB-DS v4 lsass DsRolerGetPrimaryDomainInformation little endian attempt (netbios.rules) 5137 - NETBIOS SMB v4 lsass DsRolerGetPrimaryDomainInformation WriteAndX little endian attempt (netbios.rules) 5138 - NETBIOS SMB-DS v4 lsass DsRolerGetPrimaryDomainInformation WriteAndX little endian attempt (netbios.rules) 5139 - NETBIOS SMB v4 lsass DsRolerGetPrimaryDomainInformation unicode little endian attempt (netbios.rules) 5141 - NETBIOS SMB v4 lsass DsRolerGetPrimaryDomainInformation WriteAndX unicode little endian attempt (netbios.rules) 5142 - NETBIOS SMB-DS v4 lsass DsRolerGetPrimaryDomainInformation WriteAndX unicode little endian attempt (netbios.rules) 5143 - NETBIOS SMB lsass DsRolerGetPrimaryDomainInformation andx attempt (netbios.rules) 5144 - NETBIOS SMB lsass DsRolerGetPrimaryDomainInformation WriteAndX little endian andx attempt (netbios.rules) 5145 - NETBIOS SMB-DS lsass DsRolerGetPrimaryDomainInformation WriteAndX little endian andx attempt (netbios.rules) 5146 - NETBIOS SMB v4 lsass DsRolerGetPrimaryDomainInformation little endian andx attempt (netbios.rules) 5147 - NETBIOS SMB-DS lsass DsRolerGetPrimaryDomainInformation little endian andx attempt (netbios.rules) 5152 - NETBIOS SMB-DS lsass DsRolerGetPrimaryDomainInformation andx attempt (netbios.rules) 5155 - NETBIOS SMB lsass DsRolerGetPrimaryDomainInformation little endian andx attempt (netbios.rules) 5157 - NETBIOS SMB-DS v4 lsass DsRolerGetPrimaryDomainInformation unicode andx attempt (netbios.rules) 5158 - NETBIOS SMB-DS lsass DsRolerGetPrimaryDomainInformation unicode little endian andx attempt (netbios.rules) 5160 - NETBIOS SMB-DS v4 lsass DsRolerGetPrimaryDomainInformation WriteAndX unicode andx attempt (netbios.rules) 5161 - NETBIOS SMB-DS lsass DsRolerGetPrimaryDomainInformation WriteAndX andx attempt (netbios.rules) 5163 - NETBIOS SMB-DS lsass DsRolerGetPrimaryDomainInformation unicode andx attempt (netbios.rules) 5164 - NETBIOS SMB lsass DsRolerGetPrimaryDomainInformation WriteAndX andx attempt (netbios.rules) 5165 - NETBIOS SMB lsass DsRolerGetPrimaryDomainInformation unicode andx attempt (netbios.rules) 5167 - NETBIOS SMB lsass DsRolerGetPrimaryDomainInformation unicode little endian andx attempt (netbios.rules) 5168 - NETBIOS SMB-DS lsass DsRolerGetPrimaryDomainInformation WriteAndX unicode andx attempt (netbios.rules) 5169 - NETBIOS SMB lsass DsRolerGetPrimaryDomainInformation WriteAndX unicode little endian andx attempt (netbios.rules) 5170 - NETBIOS SMB lsass DsRolerGetPrimaryDomainInformation WriteAndX unicode andx attempt (netbios.rules) 5171 - NETBIOS SMB-DS lsass DsRolerGetPrimaryDomainInformation WriteAndX unicode little endian andx attempt (netbios.rules) 5173 - NETBIOS SMB v4 lsass DsRolerGetPrimaryDomainInformation andx attempt (netbios.rules) 5174 - NETBIOS SMB-DS v4 lsass DsRolerGetPrimaryDomainInformation unicode little endian andx attempt (netbios.rules) 5176 - NETBIOS SMB-DS v4 lsass DsRolerGetPrimaryDomainInformation andx attempt (netbios.rules) 5177 - NETBIOS SMB v4 lsass DsRolerGetPrimaryDomainInformation WriteAndX andx attempt (netbios.rules) 5178 - NETBIOS SMB v4 lsass DsRolerGetPrimaryDomainInformation unicode andx attempt (netbios.rules) 5179 - NETBIOS SMB v4 lsass DsRolerGetPrimaryDomainInformation WriteAndX unicode andx attempt (netbios.rules) 5180 - NETBIOS SMB-DS v4 lsass DsRolerGetPrimaryDomainInformation WriteAndX andx attempt (netbios.rules) 5184 - NETBIOS SMB-DS v4 lsass DsRolerGetPrimaryDomainInformation little endian andx attempt (netbios.rules) 5185 - NETBIOS SMB v4 lsass DsRolerGetPrimaryDomainInformation WriteAndX little endian andx attempt (netbios.rules) 5186 - NETBIOS SMB-DS v4 lsass DsRolerGetPrimaryDomainInformation WriteAndX little endian andx attempt (netbios.rules) 5187 - NETBIOS SMB v4 lsass DsRolerGetPrimaryDomainInformation unicode little endian andx attempt (netbios.rules) 5189 - NETBIOS SMB v4 lsass DsRolerGetPrimaryDomainInformation WriteAndX unicode little endian andx attempt (netbios.rules) 5190 - NETBIOS SMB-DS v4 lsass DsRolerGetPrimaryDomainInformation WriteAndX unicode little endian andx attempt (netbios.rules) 5192 - NETBIOS DCERPC NCACN-IP-TCP v4 lsass DsRolerGetPrimaryDomainInformation attempt (netbios.rules) 5195 - NETBIOS DCERPC NCADG-IP-UDP v4 lsass DsRolerGetPrimaryDomainInformation attempt (netbios.rules) 5196 - NETBIOS DCERPC NCACN-IP-TCP v4 lsass DsRolerGetPrimaryDomainInformation little endian attempt (netbios.rules) 5198 - NETBIOS DCERPC NCADG-IP-UDP v4 lsass DsRolerGetPrimaryDomainInformation little endian attempt (netbios.rules) 5200 - NETBIOS DCERPC NCACN-IP-TCP lsass DsRolerGetPrimaryDomainInformation attempt (netbios.rules) 5203 - NETBIOS DCERPC NCADG-IP-UDP lsass DsRolerGetPrimaryDomainInformation attempt (netbios.rules) 5204 - NETBIOS DCERPC NCACN-IP-TCP lsass DsRolerGetPrimaryDomainInformation little endian attempt (netbios.rules) 5206 - NETBIOS DCERPC NCADG-IP-UDP lsass DsRolerGetPrimaryDomainInformation little endian attempt (netbios.rules)
