SIP: Invalid SIP Packet

This signature detects packets using the SIP port (UDP/5060), but that do not contain any SIP information. Some Internet Telephony devices incorporate these sorts of packets as "Keep Alive" packets, but they are not valid SIP packets.

Short Name
VOIP:SIP:AUDIT:NOT-SIP
Severity
Info
Recommended
False
Recommended Action
None
Category
VOIP
Keywords
Invalid Packet SIP
Release Date
09/16/2008
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
Port
UDP/5060
False Positive
Frequently

Found a potential security threat?