Alert Table for File Transfer T-J.pcap

Relative Time Packet Source Source Port Destination Dest Port Category Rule Set Signature Severity
14402.0 224 192.168.141.144 50115 192.168.141.68 445 Generic Protocol Command Decode SURICATA SMB file overlap 3
14402.0 225 192.168.141.68 445 192.168.141.144 50115 Generic Protocol Command Decode SURICATA SMB file overlap 3
14402.0 407 192.168.141.144 50115 192.168.141.68 445 Generic Protocol Command Decode SURICATA SMB file overlap 3
14402.0 408 192.168.141.68 445 192.168.141.144 50115 Generic Protocol Command Decode SURICATA SMB file overlap 3
14403.0 1002 192.168.141.144 50115 192.168.141.68 445 Potentially Bad Traffic ET POLICY Possible WMI .mof Managed Object File Use Over SMB 2
14403.0 1005 192.168.141.144 50115 192.168.141.68 445 Potentially Bad Traffic ET POLICY Possible WMI .mof Managed Object File Use Over SMB 2
14403.0 1037 192.168.141.144 50115 192.168.141.68 445 Potentially Bad Traffic ET POLICY Possible WMI .mof Managed Object File Use Over SMB 2
14403.0 1056 192.168.141.144 50115 192.168.141.68 445 Potentially Bad Traffic ET POLICY Possible WMI .mof Managed Object File Use Over SMB 2
14403.0 1099 192.168.141.144 50115 192.168.141.68 445 Potentially Bad Traffic ET POLICY Possible WMI .mof Managed Object File Use Over SMB 2
14403.0 1158 192.168.141.144 50115 192.168.141.68 445 Potentially Bad Traffic ET POLICY Possible WMI .mof Managed Object File Use Over SMB 2
14403.0 1161 192.168.141.144 50115 192.168.141.68 445 Potentially Bad Traffic ET POLICY Possible WMI .mof Managed Object File Use Over SMB 2
14403.0 1205 192.168.141.144 50115 192.168.141.68 445 Potentially Bad Traffic ET POLICY Possible WMI .mof Managed Object File Use Over SMB 2
14403.0 1224 192.168.141.144 50115 192.168.141.68 445 Potentially Bad Traffic ET POLICY Possible WMI .mof Managed Object File Use Over SMB 2
14403.0 1255 192.168.141.144 50115 192.168.141.68 445 Potentially Bad Traffic ET POLICY Possible WMI .mof Managed Object File Use Over SMB 2
14403.0 1308 192.168.141.144 50115 192.168.141.68 445 Potentially Bad Traffic ET POLICY Possible WMI .mof Managed Object File Use Over SMB 2
14403.0 1350 192.168.141.144 50115 192.168.141.68 445 Potentially Bad Traffic ET POLICY Possible WMI .mof Managed Object File Use Over SMB 2
14403.0 758 192.168.141.144 50115 192.168.141.68 445 Potentially Bad Traffic ET POLICY Possible WMI .mof Managed Object File Use Over SMB 2
14403.0 773 192.168.141.144 50115 192.168.141.68 445 Potentially Bad Traffic ET POLICY Possible WMI .mof Managed Object File Use Over SMB 2
14403.0 792 192.168.141.144 50115 192.168.141.68 445 Potentially Bad Traffic ET POLICY Possible WMI .mof Managed Object File Use Over SMB 2
14403.0 837 192.168.141.144 50115 192.168.141.68 445 Potentially Bad Traffic ET POLICY Possible WMI .mof Managed Object File Use Over SMB 2
14403.0 856 192.168.141.144 50115 192.168.141.68 445 Potentially Bad Traffic ET POLICY Possible WMI .mof Managed Object File Use Over SMB 2
14403.0 877 192.168.141.144 50115 192.168.141.68 445 Potentially Bad Traffic ET POLICY Possible WMI .mof Managed Object File Use Over SMB 2
14409.0 4056 192.168.141.144 50115 192.168.141.68 445 Generic Protocol Command Decode SURICATA SMB file overlap 3
14409.0 4057 192.168.141.68 445 192.168.141.144 50115 Generic Protocol Command Decode SURICATA SMB file overlap 3
Open in new window Done