Sourcefire VRT Update
Date: 2007-04-13
This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack.
The format of the file is:
sid - Message (rule group)
New rules: 10476 <-> WEB-CLIENT MarkAny MaPrintModule_WORK ActiveX clsid access (web-client.rules) 10477 <-> WEB-CLIENT MarkAny MaPrintModule_WORK ActiveX clsid unicode access (web-client.rules) 10478 <-> WEB-CLIENT MarkAny MaPrintModule_WORK ActiveX function call access (web-client.rules) 10479 <-> WEB-CLIENT MarkAny MaPrintModule_WORK ActiveX function call unicode access (web-client.rules) 10482 <-> RPC portmap CA BrightStor ARCserve tcp request (rpc.rules) 10483 <-> RPC portmap CA BrightStor ARCserve udp request (rpc.rules) 10484 <-> RPC portmap CA BrightStor ARCserve tcp procedure 191 attempt (rpc.rules) 10485 <-> RPC portmap CA BrightStor ARCserve udp procedure 191 attempt (rpc.rules) 10486 <-> NETBIOS DCERPC DIRECT brightstor-arc function 15 little endian attempt (netbios.rules) 10487 <-> NETBIOS DCERPC DIRECT brightstor-arc function 15 attempt (netbios.rules) 10488 <-> NETBIOS DCERPC DIRECT v4 brightstor-arc function 15 little endian attempt (netbios.rules) 10489 <-> NETBIOS DCERPC DIRECT v4 brightstor-arc function 15 attempt (netbios.rules) 10490 <-> NETBIOS DCERPC DIRECT brightstor-arc function 15 little endian object call attempt (netbios.rules) 10491 <-> NETBIOS DCERPC DIRECT brightstor-arc function 15 object call attempt (netbios.rules) 10492 <-> NETBIOS DCERPC DIRECT v4 brightstor-arc function 16 attempt (netbios.rules) 10493 <-> NETBIOS DCERPC DIRECT v4 brightstor-arc function 16 little endian attempt (netbios.rules) 10494 <-> NETBIOS DCERPC DIRECT brightstor-arc function 16 little endian attempt (netbios.rules) 10495 <-> NETBIOS DCERPC DIRECT brightstor-arc function 16 attempt (netbios.rules) 10496 <-> NETBIOS DCERPC DIRECT brightstor-arc function 16 little endian object call attempt (netbios.rules) 10497 <-> NETBIOS DCERPC DIRECT brightstor-arc function 16 object call attempt (netbios.rules) 10498 <-> NETBIOS DCERPC DIRECT brightstor-arc function 17 attempt (netbios.rules) 10499 <-> NETBIOS DCERPC DIRECT brightstor-arc function 17 little endian attempt (netbios.rules) 10500 <-> NETBIOS DCERPC DIRECT v4 brightstor-arc function 17 little endian attempt (netbios.rules) 10501 <-> NETBIOS DCERPC DIRECT v4 brightstor-arc function 17 attempt (netbios.rules) 10502 <-> NETBIOS DCERPC DIRECT brightstor-arc function 17 object call attempt (netbios.rules) 10503 <-> NETBIOS DCERPC DIRECT brightstor-arc function 17 little endian object call attempt (netbios.rules) 10504 <-> SHELLCODE unescape encoded shellcode (shellcode.rules) 10505 <-> SHELLCODE unescape encoded shellcode (shellcode.rules) 10506 <-> SHELLCODE Canvas shellcode basic encoder (shellcode.rules) 10507 <-> SHELLCODE Canvas shellcode basic encoder (shellcode.rules) 10508 <-> SHELLCODE Canvas shellcode basic encoder (shellcode.rules) 10509 <-> SHELLCODE Canvas shellcode basic encoder (shellcode.rules) 10510 <-> SHELLCODE Canvas shellcode basic encoder (shellcode.rules) 10511 <-> SHELLCODE Canvas shellcode basic encoder (shellcode.rules) 10512 <-> SHELLCODE Canvas shellcode basic encoder (shellcode.rules) 10513 <-> SHELLCODE Canvas shellcode basic encoder (shellcode.rules) 10514 <-> NETBIOS DCERPC DIRECT dns alter context attempt (netbios.rules) 10515 <-> NETBIOS DCERPC DIRECT dns little endian alter context attempt (netbios.rules) 10516 <-> NETBIOS DCERPC DIRECT dns bind attempt (netbios.rules) 10517 <-> NETBIOS DCERPC DIRECT dns little endian bind attempt (netbios.rules) 10518 <-> NETBIOS DCERPC DIRECT v4 dns R_Dnssrv funcs1 little endian overflow attempt (netbios.rules) 10519 <-> NETBIOS DCERPC DIRECT v4 dns R_Dnssrv funcs1 overflow attempt (netbios.rules) 10520 <-> NETBIOS DCERPC DIRECT dns R_Dnssrv funcs1 overflow attempt (netbios.rules) 10521 <-> NETBIOS DCERPC DIRECT dns R_Dnssrv funcs1 little endian overflow attempt (netbios.rules) 10522 <-> NETBIOS DCERPC DIRECT dns R_Dnssrv funcs1 object call overflow attempt (netbios.rules) 10523 <-> NETBIOS DCERPC DIRECT dns R_Dnssrv funcs1 little endian object call overflow attempt (netbios.rules) 10524 <-> NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 unicode overflow attempt (netbios.rules) 10525 <-> NETBIOS SMB v4 dns R_Dnssrv funcs2 overflow attempt (netbios.rules) 10526 <-> NETBIOS SMB v4 dns R_Dnssrv funcs2 unicode overflow attempt (netbios.rules) 10527 <-> NETBIOS SMB-DS v4 dns R_Dnssrv funcs2 WriteAndX overflow attempt (netbios.rules) 10528 <-> NETBIOS SMB-DS v4 dns R_Dnssrv funcs2 unicode overflow attempt (netbios.rules) 10529 <-> NETBIOS SMB v4 dns R_Dnssrv funcs2 WriteAndX overflow attempt (netbios.rules) 10530 <-> NETBIOS SMB-DS v4 dns R_Dnssrv funcs2 WriteAndX unicode overflow attempt (netbios.rules) 10531 <-> NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 overflow attempt (netbios.rules) 10532 <-> NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 WriteAndX overflow attempt (netbios.rules) 10533 <-> NETBIOS SMB v4 dns R_Dnssrv funcs2 WriteAndX unicode overflow attempt (netbios.rules) 10534 <-> NETBIOS SMB-DS v4 dns R_Dnssrv funcs2 overflow attempt (netbios.rules) 10535 <-> NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 WriteAndX unicode overflow attempt (netbios.rules) 10536 <-> NETBIOS SMB v4 dns R_Dnssrv funcs2 little endian overflow attempt (netbios.rules) 10537 <-> NETBIOS SMB v4 dns R_Dnssrv funcs2 WriteAndX little endian overflow attempt (netbios.rules) 10538 <-> NETBIOS SMB v4 dns R_Dnssrv funcs2 unicode little endian overflow attempt (netbios.rules) 10539 <-> NETBIOS SMB v4 dns R_Dnssrv funcs2 WriteAndX unicode little endian overflow attempt (netbios.rules) 10540 <-> NETBIOS SMB-DS v4 dns R_Dnssrv funcs2 little endian overflow attempt (netbios.rules) 10541 <-> NETBIOS SMB-DS v4 dns R_Dnssrv funcs2 WriteAndX little endian overflow attempt (netbios.rules) 10542 <-> NETBIOS SMB-DS v4 dns R_Dnssrv funcs2 unicode little endian overflow attempt (netbios.rules) 10543 <-> NETBIOS SMB-DS v4 dns R_Dnssrv funcs2 WriteAndX unicode little endian overflow attempt (netbios.rules) 10544 <-> NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 little endian overflow attempt (netbios.rules) 10545 <-> NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 WriteAndX little endian overflow attempt (netbios.rules) 10546 <-> NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 unicode little endian overflow attempt (netbios.rules) 10547 <-> NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 WriteAndX unicode little endian overflow attempt (netbios.rules) 10548 <-> NETBIOS SMB dns R_Dnssrv funcs2 overflow attempt (netbios.rules) 10549 <-> NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX overflow attempt (netbios.rules) 10550 <-> NETBIOS SMB dns R_Dnssrv funcs2 unicode overflow attempt (netbios.rules) 10551 <-> NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX unicode overflow attempt (netbios.rules) 10552 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 overflow attempt (netbios.rules) 10553 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 WriteAndX overflow attempt (netbios.rules) 10554 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 unicode overflow attempt (netbios.rules) 10555 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 WriteAndX unicode overflow attempt (netbios.rules) 10556 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 overflow attempt (netbios.rules) 10557 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX overflow attempt (netbios.rules) 10558 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 unicode overflow attempt (netbios.rules) 10559 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX unicode overflow attempt (netbios.rules) 10560 <-> NETBIOS SMB dns R_Dnssrv funcs2 little endian overflow attempt (netbios.rules) 10561 <-> NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX little endian overflow attempt (netbios.rules) 10562 <-> NETBIOS SMB dns R_Dnssrv funcs2 unicode little endian overflow attempt (netbios.rules) 10563 <-> NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX unicode little endian overflow attempt (netbios.rules) 10564 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 little endian overflow attempt (netbios.rules) 10565 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 WriteAndX little endian overflow attempt (netbios.rules) 10566 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 unicode little endian overflow attempt (netbios.rules) 10567 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 WriteAndX unicode little endian overflow attempt (netbios.rules) 10568 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 little endian overflow attempt (netbios.rules) 10569 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX little endian overflow attempt (netbios.rules) 10570 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 unicode little endian overflow attempt (netbios.rules) 10571 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX unicode little endian overflow attempt (netbios.rules) 10572 <-> NETBIOS SMB dns R_Dnssrv funcs2 object call overflow attempt (netbios.rules) 10573 <-> NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX object call overflow attempt (netbios.rules) 10574 <-> NETBIOS SMB dns R_Dnssrv funcs2 unicode object call overflow attempt (netbios.rules) 10575 <-> NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX unicode object call overflow attempt (netbios.rules) 10576 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 object call overflow attempt (netbios.rules) 10577 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 WriteAndX object call overflow attempt (netbios.rules) 10578 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 unicode object call overflow attempt (netbios.rules) 10579 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 WriteAndX unicode object call overflow attempt (netbios.rules) 10580 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 object call overflow attempt (netbios.rules) 10581 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX object call overflow attempt (netbios.rules) 10582 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 unicode object call overflow attempt (netbios.rules) 10583 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX unicode object call overflow attempt (netbios.rules) 10584 <-> NETBIOS SMB dns R_Dnssrv funcs2 little endian object call overflow attempt (netbios.rules) 10585 <-> NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX little endian object call overflow attempt (netbios.rules) 10586 <-> NETBIOS SMB dns R_Dnssrv funcs2 unicode little endian object call overflow attempt (netbios.rules) 10587 <-> NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX unicode little endian object call overflow attempt (netbios.rules) 10588 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 little endian object call overflow attempt (netbios.rules) 10589 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 WriteAndX little endian object call overflow attempt (netbios.rules) 10590 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 unicode little endian object call overflow attempt (netbios.rules) 10591 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 WriteAndX unicode little endian object call overflow attempt (netbios.rules) 10592 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 little endian object call overflow attempt (netbios.rules) 10593 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX little endian object call overflow attempt (netbios.rules) 10594 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 unicode little endian object call overflow attempt (netbios.rules) 10595 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX unicode little endian object call overflow attempt (netbios.rules) 10596 <-> NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 unicode andx overflow attempt (netbios.rules) 10597 <-> NETBIOS SMB v4 dns R_Dnssrv funcs2 andx overflow attempt (netbios.rules) 10598 <-> NETBIOS SMB v4 dns R_Dnssrv funcs2 unicode andx overflow attempt (netbios.rules) 10599 <-> NETBIOS SMB-DS v4 dns R_Dnssrv funcs2 WriteAndX andx overflow attempt (netbios.rules) 10600 <-> NETBIOS SMB-DS v4 dns R_Dnssrv funcs2 unicode andx overflow attempt (netbios.rules) 10601 <-> NETBIOS SMB v4 dns R_Dnssrv funcs2 WriteAndX andx overflow attempt (netbios.rules) 10602 <-> NETBIOS SMB-DS v4 dns R_Dnssrv funcs2 WriteAndX unicode andx overflow attempt (netbios.rules) 10603 <-> NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 andx overflow attempt (netbios.rules) 10604 <-> NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 WriteAndX andx overflow attempt (netbios.rules) 10605 <-> NETBIOS SMB v4 dns R_Dnssrv funcs2 WriteAndX unicode andx overflow attempt (netbios.rules) 10606 <-> NETBIOS SMB-DS v4 dns R_Dnssrv funcs2 andx overflow attempt (netbios.rules) 10607 <-> NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 WriteAndX unicode andx overflow attempt (netbios.rules) 10608 <-> NETBIOS SMB v4 dns R_Dnssrv funcs2 little endian andx overflow attempt (netbios.rules) 10609 <-> NETBIOS SMB v4 dns R_Dnssrv funcs2 WriteAndX little endian andx overflow attempt (netbios.rules) 10610 <-> NETBIOS SMB v4 dns R_Dnssrv funcs2 unicode little endian andx overflow attempt (netbios.rules) 10611 <-> NETBIOS SMB v4 dns R_Dnssrv funcs2 WriteAndX unicode little endian andx overflow attempt (netbios.rules) 10612 <-> NETBIOS SMB-DS v4 dns R_Dnssrv funcs2 little endian andx overflow attempt (netbios.rules) 10613 <-> NETBIOS SMB-DS v4 dns R_Dnssrv funcs2 WriteAndX little endian andx overflow attempt (netbios.rules) 10614 <-> NETBIOS SMB-DS v4 dns R_Dnssrv funcs2 unicode little endian andx overflow attempt (netbios.rules) 10615 <-> NETBIOS SMB-DS v4 dns R_Dnssrv funcs2 WriteAndX unicode little endian andx overflow attempt (netbios.rules) 10616 <-> NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 little endian andx overflow attempt (netbios.rules) 10617 <-> NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 WriteAndX little endian andx overflow attempt (netbios.rules) 10618 <-> NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 unicode little endian andx overflow attempt (netbios.rules) 10619 <-> NETBIOS-DG SMB v4 dns R_Dnssrv funcs2 WriteAndX unicode little endian andx overflow attempt (netbios.rules) 10620 <-> NETBIOS SMB dns R_Dnssrv funcs2 andx overflow attempt (netbios.rules) 10621 <-> NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX andx overflow attempt (netbios.rules) 10622 <-> NETBIOS SMB dns R_Dnssrv funcs2 unicode andx overflow attempt (netbios.rules) 10623 <-> NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX unicode andx overflow attempt (netbios.rules) 10624 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 andx overflow attempt (netbios.rules) 10625 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 WriteAndX andx overflow attempt (netbios.rules) 10626 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 unicode andx overflow attempt (netbios.rules) 10627 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 WriteAndX unicode andx overflow attempt (netbios.rules) 10628 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 andx overflow attempt (netbios.rules) 10629 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX andx overflow attempt (netbios.rules) 10630 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 unicode andx overflow attempt (netbios.rules) 10631 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX unicode andx overflow attempt (netbios.rules) 10632 <-> NETBIOS SMB dns R_Dnssrv funcs2 little endian andx overflow attempt (netbios.rules) 10633 <-> NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX little endian andx overflow attempt (netbios.rules) 10634 <-> NETBIOS SMB dns R_Dnssrv funcs2 unicode little endian andx overflow attempt (netbios.rules) 10635 <-> NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX unicode little endian andx overflow attempt (netbios.rules) 10636 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 little endian andx overflow attempt (netbios.rules) 10637 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 WriteAndX little endian andx overflow attempt (netbios.rules) 10638 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 unicode little endian andx overflow attempt (netbios.rules) 10639 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 WriteAndX unicode little endian andx overflow attempt (netbios.rules) 10640 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 little endian andx overflow attempt (netbios.rules) 10641 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX little endian andx overflow attempt (netbios.rules) 10642 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 unicode little endian andx overflow attempt (netbios.rules) 10643 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX unicode little endian andx overflow attempt (netbios.rules) 10644 <-> NETBIOS SMB dns R_Dnssrv funcs2 andx object call overflow attempt (netbios.rules) 10645 <-> NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX andx object call overflow attempt (netbios.rules) 10646 <-> NETBIOS SMB dns R_Dnssrv funcs2 unicode andx object call overflow attempt (netbios.rules) 10647 <-> NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX unicode andx object call overflow attempt (netbios.rules) 10648 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 andx object call overflow attempt (netbios.rules) 10649 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 WriteAndX andx object call overflow attempt (netbios.rules) 10650 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 unicode andx object call overflow attempt (netbios.rules) 10651 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 WriteAndX unicode andx object call overflow attempt (netbios.rules) 10652 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 andx object call overflow attempt (netbios.rules) 10653 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX andx object call overflow attempt (netbios.rules) 10654 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 unicode andx object call overflow attempt (netbios.rules) 10655 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX unicode andx object call overflow attempt (netbios.rules) 10656 <-> NETBIOS SMB dns R_Dnssrv funcs2 little endian andx object call overflow attempt (netbios.rules) 10657 <-> NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX little endian andx object call overflow attempt (netbios.rules) 10658 <-> NETBIOS SMB dns R_Dnssrv funcs2 unicode little endian andx object call overflow attempt (netbios.rules) 10659 <-> NETBIOS SMB dns R_Dnssrv funcs2 WriteAndX unicode little endian andx object call overflow attempt (netbios.rules) 10660 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 little endian andx object call overflow attempt (netbios.rules) 10661 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 WriteAndX little endian andx object call overflow attempt (netbios.rules) 10662 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 unicode little endian andx object call overflow attempt (netbios.rules) 10663 <-> NETBIOS SMB-DS dns R_Dnssrv funcs2 WriteAndX unicode little endian andx object call overflow attempt (netbios.rules) 10664 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 little endian andx object call overflow attempt (netbios.rules) 10665 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX little endian andx object call overflow attempt (netbios.rules) 10666 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 unicode little endian andx object call overflow attempt (netbios.rules) 10667 <-> NETBIOS-DG SMB dns R_Dnssrv funcs2 WriteAndX unicode little endian andx object call overflow attempt (netbios.rules) 10668 <-> NETBIOS DCERPC NCACN-HTTP v4 dns R_Dnssrv funcs2 overflow attempt (netbios.rules) 10669 <-> NETBIOS DCERPC DIRECT dns R_Dnssrv funcs2 little endian overflow attempt (netbios.rules) 10670 <-> NETBIOS DCERPC DIRECT-UDP v4 dns R_Dnssrv funcs2 overflow attempt (netbios.rules) 10671 <-> NETBIOS DCERPC NCADG-IP-UDP v4 dns R_Dnssrv funcs2 overflow attempt (netbios.rules) 10672 <-> NETBIOS DCERPC NCACN-IP-TCP dns R_Dnssrv funcs2 overflow attempt (netbios.rules) 10673 <-> NETBIOS DCERPC NCACN-IP-TCP v4 dns R_Dnssrv funcs2 little endian overflow attempt (netbios.rules) 10674 <-> NETBIOS DCERPC NCACN-IP-TCP v4 dns R_Dnssrv funcs2 overflow attempt (netbios.rules) 10675 <-> NETBIOS DCERPC DIRECT-UDP dns R_Dnssrv funcs2 overflow attempt (netbios.rules) 10676 <-> NETBIOS DCERPC NCADG-IP-UDP dns R_Dnssrv funcs2 overflow attempt (netbios.rules) 10677 <-> NETBIOS DCERPC NCACN-HTTP v4 dns R_Dnssrv funcs2 little endian overflow attempt (netbios.rules) 10678 <-> NETBIOS DCERPC DIRECT-UDP v4 dns R_Dnssrv funcs2 little endian overflow attempt (netbios.rules) 10679 <-> NETBIOS DCERPC NCACN-HTTP dns R_Dnssrv funcs2 overflow attempt (netbios.rules) 10680 <-> NETBIOS DCERPC DIRECT-UDP dns R_Dnssrv funcs2 little endian overflow attempt (netbios.rules) 10681 <-> NETBIOS DCERPC NCACN-IP-TCP dns R_Dnssrv funcs2 little endian overflow attempt (netbios.rules) 10682 <-> NETBIOS DCERPC NCACN-HTTP dns R_Dnssrv funcs2 little endian overflow attempt (netbios.rules) 10683 <-> NETBIOS DCERPC NCADG-IP-UDP v4 dns R_Dnssrv funcs2 little endian overflow attempt (netbios.rules) 10684 <-> NETBIOS DCERPC DIRECT v4 dns R_Dnssrv funcs2 overflow attempt (netbios.rules) 10685 <-> NETBIOS DCERPC NCADG-IP-UDP dns R_Dnssrv funcs2 little endian overflow attempt (netbios.rules) 10686 <-> NETBIOS DCERPC DIRECT dns R_Dnssrv funcs2 overflow attempt (netbios.rules) 10687 <-> NETBIOS DCERPC DIRECT v4 dns R_Dnssrv funcs2 little endian overflow attempt (netbios.rules) 10688 <-> NETBIOS DCERPC DIRECT dns R_Dnssrv funcs2 little endian object call overflow attempt (netbios.rules) 10689 <-> NETBIOS DCERPC NCACN-IP-TCP dns R_Dnssrv funcs2 object call overflow attempt (netbios.rules) 10690 <-> NETBIOS DCERPC DIRECT-UDP dns R_Dnssrv funcs2 object call overflow attempt (netbios.rules) 10691 <-> NETBIOS DCERPC NCADG-IP-UDP dns R_Dnssrv funcs2 object call overflow attempt (netbios.rules) 10692 <-> NETBIOS DCERPC NCACN-HTTP dns R_Dnssrv funcs2 object call overflow attempt (netbios.rules) 10693 <-> NETBIOS DCERPC DIRECT-UDP dns R_Dnssrv funcs2 little endian object call overflow attempt (netbios.rules) 10694 <-> NETBIOS DCERPC NCACN-IP-TCP dns R_Dnssrv funcs2 little endian object call overflow attempt (netbios.rules) 10695 <-> NETBIOS DCERPC NCACN-HTTP dns R_Dnssrv funcs2 little endian object call overflow attempt (netbios.rules) 10696 <-> NETBIOS DCERPC NCADG-IP-UDP dns R_Dnssrv funcs2 little endian object call overflow attempt (netbios.rules) 10697 <-> NETBIOS DCERPC DIRECT dns R_Dnssrv funcs2 object call overflow attempt (netbios.rules) Updated rules: 537 <-> NETBIOS SMB IPC$ share access (netbios.rules) 538 <-> NETBIOS SMB IPC$ unicode share access (netbios.rules) 2465 <-> NETBIOS-DG SMB IPC$ share access (netbios.rules) 2466 <-> NETBIOS-DG SMB IPC$ unicode share access (netbios.rules) 2952 <-> NETBIOS SMB-DS IPC$ share access (netbios.rules) 2953 <-> NETBIOS SMB-DS IPC$ unicode share access (netbios.rules) 2954 <-> NETBIOS SMB IPC$ andx share access (netbios.rules) 2955 <-> NETBIOS SMB IPC$ unicode andx share access (netbios.rules) 4638 <-> EXPLOIT RSVP Protocol zero length object DoS attempt (exploit.rules) 10408 <-> RPC portmap HP-UX Single Logical Screen SLSD tcp request (rpc.rules) 10409 <-> RPC portmap HP-UX Single Logical Screen SLSD udp request (rpc.rules) 10410 <-> RPC portmap HP-UX Single Logical Screen SLSD tcp request (rpc.rules) 10411 <-> RPC portmap HP-UX Single Logical Screen SLSD udp request (rpc.rules) 10475 <-> MISC UPNP notification type overflow attempt (misc.rules)
