Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

False positives on 3325 (Samba Call_trans2open)

Ive been getting alot of False positives 3325 (Samba Call_trans2open)..errors on my IDS 4235 ver: 4.1. They are all occuring from workstation or member servers that are trying to connect to my W2k server. We are not running Samba on Lan..Any advice would be greatly appreciated..Thanks

2 REPLIES
Cisco Employee

Re: False positives on 3325 (Samba Call_trans2open)

Can you please post the full specific version and signature level of your system. The signature is looking for a specific type of malformed SMB transaction that is a problem for Samba systems. If you do not run Samba, you could disable this alarm.

Scott C.

Anonymous
N/A

Re: False positives on 3325 (Samba Call_trans2open)

i will just simply disable the alarm since we dont use samba. Thanks alot.

101
Views
0
Helpful
2
Replies
CreatePlease to create content