NETBIOS: Fragmented Transaction Response

This protocol anomaly is an SMB response message of type 0x25 (transaction) in which the amount of data is not the total amount of data in the entire transaction response.

Extended Description

Observation of fragmented server-to-client SMB response messages represents a protocol anomaly and could indicate a network configuration error or possible attack.

Short Name
NETBIOS:NBDS:FRAG_TRANS_RESP
Severity
Warning
Recommended
False
Recommended Action
None
Category
NETBIOS
Release Date
01/30/2004
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
False Positive
Unknown

Found a potential security threat?