12-12-2003 08:21 AM - edited 03-09-2019 05:51 AM
Ive been getting alot of False positives 3325 (Samba Call_trans2open)..errors on my IDS 4235 ver: 4.1. They are all occuring from workstation or member servers that are trying to connect to my W2k server. We are not running Samba on Lan..Any advice would be greatly appreciated..Thanks
12-15-2003 06:47 AM
Can you please post the full specific version and signature level of your system. The signature is looking for a specific type of malformed SMB transaction that is a problem for Samba systems. If you do not run Samba, you could disable this alarm.
Scott C.
12-15-2003 10:09 AM
i will just simply disable the alarm since we dont use samba. Thanks alot.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide