Symantec™ Security Gateways Reference Guide - Sawmill

354 IDS eventsProbesSensor Record File Open FailureBase Event:Details:SENSOR_RCRDINIT_FAILUREA traffic recording sensor has exited due to a failure to open the file for recorded traffic. Check tomake sure that the system has sufficient free disk space.ProbesDNS ProbingBase Event:Details:Response:Affected:DNS_BIND_HESIODA bind HESIOD query was made. You can use these to mine data from the running version bind.If seen in sufficient volume or variation, location and audit of client and server is recommended.Examination of the packet contents may provide some additional information about the particularcommand.No specific targets.False Positives: None known.References:DNS SpecificationsFinger ProbingBase Event:Details:Response:Affected:FINGER_ONLYNUMERIC_REQUESTA numeric finger request was detected. Numeric finger requests are generally an attempt to probefor user accounts.If seen in sufficient volume or variation location and audit of client is recommended.No specific targets.False Positives: None known.References:CVE-1999-0612http://www.whitehats.com (arachNIDS #376)Finger SpecificationsFinger ProbingBase Event:Details:Response:Affected:FINGER_ROOT_REQUESTA finger request was issued for root. This generally represents an attempt at information probing.If seen in sufficient volume or variation location and audit of client is recommended.No specific targets.False Positives: None known.References:CVE-1999-0612http://www.whitehats.com (arachNIDS #376)Finger Specifications