This application requires Javascript for optimal performance.

NBSS.Invalid.Fragment

Release Date

Nov 01, 2006

Severity

low

Impact

May prevent an attack from being detected.

Description

This signature indicates an NBSS protocol anomaly. A data fragment was used in some Netbios Session Service command where a fragment is not allowed. This normally indicates an attempt to evade detection while launching an attack.

Affected Products

N/A

Recommended Actions

This indicates detection of traffic that does not comply with the protocol standard. Monitor the traffic from that network for any suspicious activity.

Coverage

IPS
VCM

Reference: VID-13542