Intrusion PreventionNBSS.Zero.Sized.PDU
Description
This signature indicates an NBSS protocol anomaly. The signature is triggered when a Netbios Session Service command contains no data. This indicates one type of denial-of-service (DoS) attack. The attacker may send several zero-sized NBSS PDU to a server to consume its CPU power.
Affected Products
N/A
Impact
Denial of service
Recommended Actions
This indicates detection of traffic that does not comply with the protocol standard. Monitor the traffic from that network for any suspicious activity.
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 13543 |
| Created | Nov 01, 2006 |
| Updated | Apr 23, 2014 |
| Risk |
|
| Default Action | pass |
| Active | |
| Affected OS | Windows |
| Affected App | Other |
| Profile Type | DoS |