NETBIOS: Invalid Protocol

This protocol anomaly detects a NetBIOS message with a USER_DATA section that is less than the size of SMB header, or the protocol field of the SMB header does not start with 0xff "S" "M" "B".

Extended Description

This is a NetBIOS protocol anomaly.

Short Name
NETBIOS:NBDS:INVALID:PROTO
Severity
Major
Recommended
False
Recommended Action
None
Category
NETBIOS
Release Date
01/30/2004
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
False Positive
Unknown

Found a potential security threat?