DNS: Invalid OPCODE

This protocol anomaly triggers when it detects a DNS request/reply with an invalid value in the header OPCODE field. This can indicate an exploit attempt.

Extended Description

Presence of anomalous DNS packets could mean an attack is occurring, the effect of which being dependent upon how the DNS software reacts to abnormal input.

Short Name
DNS:HEADERERROR:INVALID-OPCODE
Severity
Minor
Recommended
False
Recommended Action
None
Category
DNS
Release Date
04/22/2003
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
False Positive
Unknown

Found a potential security threat?