Updated Signature question

[UIMigliaj]

In the S263 Update, it states that many new signatures were added, such as "Data Base TNS Connection" and "TNS Redirect Request." I tried googling for more information on these, but nothing came up. Can anyone give me a bit of a description or point me in the right direction?

Also, it states that the SMB engine has been updated. Is there anywhere that states in more specifics what is updated?

[attmidsteam]

The information was thin, but these two signatures (TNS) are for database type activity (typically Oracle). Google for TNS & Oracle and you might get an idea if these are useful for you.

Cisco also added a new SMB engine called 'service-smb-advanced' which is supposed to replace 'service-smb'. They obsoleted most of the old signatures and duplcated those signatures to use the new engine. I believe this might be referenced in the README for S264.