Snort mailing list archives
TFTP Get
From: Clayton Mascarenhas <masclaythesnort () yahoo com>
Date: Tue, 18 Mar 2003 15:53:53 -0800 (PST)
When does this "TFTP get" attack happen?? The SID-1444 rule got triggered. What does this attack mean?? Are there any false positives associated with this?? Could this be just a false positive? 01/29-00:07:42.588539 [**] [1:1444:2] TFTP Get [**] [Classification: Potentially Bad Traffic] [Priority: 2] {UDP} 192.xxx.xxx.xxx:5454 -> 255.255.255.255:69 Thanks. Clayton --------------------------------- Do you Yahoo!? Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop!
Current thread:
- TFTP Get Clayton Mascarenhas (Mar 18)
- Re: TFTP Get Frank Knobbe (Mar 18)
- Re: TFTP Get Matt Kettler (Mar 18)
- Re: TFTP Get twig les (Mar 18)
- Re: TFTP Get Matt Kettler (Mar 18)
- Re: TFTP Get twig les (Mar 18)
- Re: TFTP Get Jason Haar (Mar 18)
- Re: TFTP Get Rich Adamson (Mar 19)
- Re: TFTP Get twig les (Mar 18)
- <Possible follow-ups>
- Re: TFTP Get Clayton Mascarenhas (Mar 18)