Snort mailing list archives

MS-SQL ping attempt is illegal or not?


From: "sb ch" <chulmin22 () hotmail com>
Date: Wed, 14 May 2003 13:56:27 +0900

Hello, all.

I found this log, and I don't know what's the meaning of the " MS-SQL ping attempt".
Is this a slammer worm which use udp 1434 related or not?
May I ignore or not?
Surely, this server(200.0.xx.xx) is fully patched.

[**] [1:2049:1] MS-SQL ping attempt [**]
[Classification: Misc activity] [Priority: 3] 05/13-17:53:01.383084 200.0.xx.xx.2:1936 -> xxx.xxx.255.255:1434
UDP TTL:126 TOS:0x0 ID:4844 IpLen:20 DgmLen:29
Len: 1
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=10674]


Thanks.

_________________________________________________________________
상큼한 만남과 따뜻한 공동체 생활... 지금 MSN 커뮤니티에서 시작하세요! http://groups.msn.com/?pgmarket=ko-kr


-------------------------------------------------------
Enterprise Linux Forum Conference & Expo, June 4-6, 2003, Santa Clara
The only event dedicated to issues related to Linux enterprise solutions
www.enterpriselinuxforum.com

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: