Snort mailing list archives

TFTP Get


From: Clayton Mascarenhas <masclaythesnort () yahoo com>
Date: Tue, 18 Mar 2003 15:53:53 -0800 (PST)


When does this "TFTP get" attack happen?? The SID-1444 rule got triggered. What does this attack mean?? Are there any 
false positives associated with this?? Could this be just a false positive? 

01/29-00:07:42.588539 [**] [1:1444:2] TFTP Get [**] [Classification: Potentially Bad Traffic] [Priority: 2] {UDP} 
192.xxx.xxx.xxx:5454 -> 255.255.255.255:69

Thanks.

Clayton

 



---------------------------------
Do you Yahoo!?
Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop!

Current thread: