MS-RPC: Frag Length Too Small

This protocol anomaly is a Microsoft Remote Procedure Call (MSRPC) fragment length that is less than the common header length. Detecting this anomaly can indicate a malicious user might be attacking your system.

Extended Description

An anomaly exists if an MSRPC message fragment length is less than the TCP packet header length, and should be detected.

References

URL: http://windowssdk.msdn.microsoft.com/en-us/library/ms719418.aspx http://www.faqs.org/rfcs/rfc1050.html http://en.wikipedia.org/wiki/MSRPC

Short Name

MS-RPC:ERR:FRAG-LEN-TOO-SMALL

Severity

Major

Recommended

True

Recommended Action

None

MS-RPC: Frag Length Too Small

Extended Description

References

Found a potential security threat?