DNS: Invalid OPCODE
This protocol anomaly triggers when it detects a DNS request/reply with an invalid value in the header OPCODE field. This can indicate an exploit attempt.
Extended Description
Presence of anomalous DNS packets could mean an attack is occurring, the effect of which being dependent upon how the DNS software reacts to abnormal input.
References
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3