cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
291
Views
0
Helpful
2
Replies

False positives on 3325 (Samba Call_trans2open)

admin_2
Level 3
Level 3

Ive been getting alot of False positives 3325 (Samba Call_trans2open)..errors on my IDS 4235 ver: 4.1. They are all occuring from workstation or member servers that are trying to connect to my W2k server. We are not running Samba on Lan..Any advice would be greatly appreciated..Thanks

2 Replies 2

scothrel
Level 3
Level 3

Can you please post the full specific version and signature level of your system. The signature is looking for a specific type of malformed SMB transaction that is a problem for Samba systems. If you do not run Samba, you could disable this alarm.

Scott C.

Not applicable

i will just simply disable the alarm since we dont use samba. Thanks alot.