ET INFO Possible NOP Sled Observed in Large DNS over TCP Packet M1

SID: 2030524Rev: 20 views
History
Sourceet/open
CreatedJuly 15, 2020
UpdatedJanuary 20, 2026
Classificationmisc-attack
alert tcp any any -> any 53 (msg:"ET INFO Possible NOP Sled Observed in Large DNS over TCP Packet M1"; flow:established,to_server; dsize:>1200; content:"|90 90 90 90 90 90 90 90|"; fast_pattern; classtype:misc-attack; sid:2030524; rev:2; metadata:affected_product Windows_DNS_server, created_at 2020_07_15, performance_impact Significant, confidence Medium, signature_severity Informational, tag possible_exploitation, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2026_01_20;)

Metadata

affected productWindows_DNS_server
created at2020_07_15
performance impactSignificant
confidenceMedium
signature severityInformational
tagDescription_Generated_By_Proofpoint_Nexus
updated at2026_01_20

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!