TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
All,
two issues here:
false positives
&
is this an attempt to use napster (see below)
we are getting false positives for sql transactions
using port 1433 from our sql servers to sql servers
running people soft.
I have confirmed this via user defined events (also
ethereal) to see that these were indeed sql packets -
usually data transfers.
I also see some of the same napster_command_long
headed toward our firewall with the port of httpd -
which makes me think that these are real attempts to
run napster - which I think is blocked at our
firewall.
Is someone (that is pointed toward our firewall)
trying to use napster ?
We are running
console 5.5.2000.277
sensor 5.0.2000.364
with sr 1.1 MU 2.2
The help for this event sez - no false positives.
ISS - Any help ??
__________________________________________________
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail.
http://personal.mail.yahoo.com/?.refer=text
