Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Signature 4508

I have a NIDS which is alarming (Sig 4508) on dest port 8000. The NSDB states that this signature is designed to alert on UDP traffic destined to port 161. So why is this signature firing?

Bob

2 REPLIES
New Member

Re: Signature 4508

I am seeing this situation as well. I'm seeing destination ports all over the place. Are you using an IDSM? I'm seeing these alarms fire on my IDSM2s, but not on my appliances.

Bronze

Re: Signature 4508

Can you capture some of the offending traffic and send it to mcerha@cisco.com? We'll need this to diagnose the problem. This signature definitely shouldn't fire for traffic on port 8000.

88
Views
0
Helpful
2
Replies
CreatePlease login to create content