SMB: Unknown Session Header Flags
This protocol anomaly is an invalid session header flag in the NETBIOS header that encapsulates an SMB. Header flags have only one bit (length extension) that is supported by all versions of SMB.
Extended Description
If the flags section of a NetBIOS packet contains any value other than zero, for any flag other than the length extension bit, this may indicate a transmission error has occurred, or that a malicious party may be injecting malformed packets into the network
Short Name
SMB:NETBIOS:UNK-SHDR-FLAGS
Severity
Warning
Recommended
False
Recommended Action
None
Category
SMB
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
False Positive
Unknown