Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
254
Views
0
Helpful
2
Replies

False positives on 3325 (Samba Call_trans2open)

admin_2
Level 3
Level 3

‎12-12-2003 08:21 AM - edited ‎03-09-2019 05:51 AM

Ive been getting alot of False positives 3325 (Samba Call_trans2open)..errors on my IDS 4235 ver: 4.1. They are all occuring from workstation or member servers that are trying to connect to my W2k server. We are not running Samba on Lan..Any advice would be greatly appreciated..Thanks

Labels:
0 Helpful
2 Replies 2

scothrel
Level 3
Level 3

‎12-15-2003 06:47 AM

Can you please post the full specific version and signature level of your system. The signature is looking for a specific type of malformed SMB transaction that is a problem for Samba systems. If you do not run Samba, you could disable this alarm.

Scott C.

0 Helpful

Not applicable
In response to scothrel

‎12-15-2003 10:09 AM

i will just simply disable the alarm since we dont use samba. Thanks alot.

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents