Hi Folks,
in addition to the signature 524 and 525 (tcp/udp
destination port zero), we'd like to see similar Signatures with a source
port of zero.
I've seen that on other IDS and it's been
discussed in forensic und pentest forums also.
Thanks a lot,
Holger
--
it.sec GmbH &
Co. KG - Online Spam Filtering
Sedanstrasse
10/Geb. 17 - Worlds first Free Online Vulnerability Check:
D-89077
Ulm
http://www.it-sec.de/freecheck.html
Fon: +49
(0)731/20589-0 - Professional Vulnerability Scans
Fax: +49
(0)731/20589-29 www.perisec.com
holger.heimann@xxxxxxxxx
www.it-sec.de
info@xxxxxxxxx
--------------------------------------------------
