[Emerging-Sigs] FP:: netbackup

David Glosser david.glosser at gmail.com
Fri Jan 16 07:22:24 EST 2009


Net Backup False Positive:

1/15-20:41:50.368405  [**] [1:2003055:4] ET MALWARE Suspicious 220 Banner on
Local Port [**] [Classification: Detection of a non-standard protocol or
event] [Priority: 2] {TCP} 172.20.xx.xx:13724 -> 192.168.xx.xx:2453

Yeah, I have to talk to the backup guy and figure out why he's not using the
backup network :)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.emergingthreats.net/pipermail/emerging-sigs/attachments/20090116/18c3cdf8/attachment.html


More information about the Emerging-sigs mailing list