cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

535
Views
0
Helpful
0
Replies
SupportAC
Beginner

Event generation on high ports of the signature DCE2_EVENT__CO_FRAG_GT_MAX_XMIT_FRAG (133:35:2)

Hi,

 

DCE2_EVENT__CO_FRAG_GT_MAX_XMIT_FRAG signature events are being generated, and when reviewing it we see that the detected traffic is on high ports, both in origin and destination. According to the rule the traffic it inspects is ICMP.

Are we interpreting it wrong, what does this rule check?

 

Thanks.

0 REPLIES 0
Create
Recognize Your Peers
Content for Community-Ad