Symantec™ Security Gateways Reference Guide - Sawmill

406 IDS eventsSuspicious activityMalformed LDAP TrafficBase Event:Details:LDAP_ASN1_TYPE_ILLEGAL_LONG_ENCODING_IN_BINDRESPONSEA long form BER encoding of an ASN.1 LDAP type was detected, but these are not permitted in thesubset of BER/ASN.1 used by LDAP. The log ASN.1 tuple type encoding was detected within a BindResponse PDU.References LDAP RFC 2251LDAP RFC 2252LDAP RFC 2253LDAP RFC 2254LDAP RFC 2255Malformed LDAP TrafficBase Event:Details:LDAP_ASN1_TYPE_ILLEGAL_LONG_ENCODING_IN_COMPAREREQUESTA long form BER encoding of an ASN.1 LDAP type was detected, but these are not permitted in thesubset of BER/ASN.1 used by LDAP. The log ASN.1 tuple type encoding was detected within aCompare Request PDU.References LDAP RFC 2251LDAP RFC 2252LDAP RFC 2253LDAP RFC 2254LDAP RFC 2255Malformed LDAP TrafficBase Event:Details:LDAP_ASN1_TYPE_ILLEGAL_LONG_ENCODING_IN_CONTROLA long form BER encoding of an ASN.1 LDAP type was detected, but these are not permitted in thesubset of BER/ASN.1 used by LDAP. The log ASN.1 tuple type encoding was detected within a singleLDAP Control.References LDAP RFC 2251LDAP RFC 2252LDAP RFC 2253LDAP RFC 2254LDAP RFC 2255Malformed LDAP TrafficBase Event:Details:LDAP_ASN1_TYPE_ILLEGAL_LONG_ENCODING_IN_EXTENDEDREQUESTA long form BER encoding of an ASN.1 LDAP type was detected, but these are not permitted in thesubset of BER/ASN.1 used by LDAP. The log ASN.1 tuple type encoding was detected within aExtended Request PDU.References LDAP RFC 2251LDAP RFC 2252LDAP RFC 2253LDAP RFC 2254LDAP RFC 2255