ET INFO Possible NOP Sled Observed in Large DNS over TCP Packet M2

SID: 2030525Rev: 20 views
History
Sourceet/open
CreatedJuly 15, 2020
UpdatedJanuary 20, 2026
Classificationmisc-attack
alert tcp any 53 -> any any (msg:"ET INFO Possible NOP Sled Observed in Large DNS over TCP Packet M2"; flow:established,from_server; dsize:>1200; content:"|90 90 90 90 90 90 90 90|"; fast_pattern; classtype:misc-attack; sid:2030525; rev:2; metadata:affected_product Windows_DNS_server, created_at 2020_07_15, performance_impact Significant, confidence High, signature_severity Informational, tag possible_exploitation, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2026_01_20;)

Metadata

affected productWindows_DNS_server
created at2020_07_15
performance impactSignificant
confidenceHigh
signature severityInformational
tagDescription_Generated_By_Proofpoint_Nexus
updated at2026_01_20

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!