TMS zl Module IPS/IDS Signature Quick Reference RLX.10.2.2.94

ProCurve TMS zl Module IPS/IDS Signature
Quick Reference Version RLX.10.2.2.94
218 © Copyright 2009 Hewlett-Packard
Development Company, LP.
ID Signature Name
Threat
Level
Industry ID
100012 ICMP Packet with Short Total Length Critical
100014 Post Connection SYN Received Critical
100015
TCP Packet Received after Reseting the
Connection
Critical
100016 Blind Spoofing Attempt Critical CVE-2001-0288
100017 Zero bytes transferred for connection Information
100018
TCP Packet with Invalid Sequence Number
Received
Critical
100019 WinNuke Attack Critical CVE-1999-0153 Bugtraq: 2010
100020
Invalid Sequence number for ACK flagged
Packet during TCP Three-way Handshake
Critical
100021 Zero length IP option Critical
100022 Unaligned Timestamp Option In IP Packet Critical
100023
Data Arrives before TCP Three-way
Handshake
Critical
100024 ICMP error message (uninitiated traffic) Critical
100026
Invalid TCP Response when ACK+SYN or
RST+ACK Expected
Critical
100027 TCP Packet with No Flag Set Critical
100028
ICMP Error Message Misbehavior (Repeated
transmission)
Critical
100030 Reset replay attack Critical
100031
Connection Closed by RST/FIN before Any
Data Transfer
Critical
100033 TCP SYN Scan Information
100034 TCP Connect Scan Information
100035 TCP FIN Scan Information
100036 TCP NULL Scan Information
100037 TCP XMAS Scan Information
100038 TCP Ack Scan Information
100039 Ping Scan Information
100040 UDP Scan Information
100041 IP Protocols Scan Information
100042 IP Packet with Protocol Field as Zero Critical
100043 ICMP Uncommon Type Packet Critical
100044
TCP/UDP Packet with Mismatching
Checksum Value
Critical