<![CDATA[describe alerts snort pfsense in wan interface]]>any one can describe this alert please ?

0_1547483514564_Captureggg.PNG

i'am so confused if an attack is run against my network

]]>https://forum.netgate.com/topic/139605/describe-alerts-snort-pfsense-in-wan-interfaceRSS for NodeSun, 11 Oct 2026 20:33:10 GMTMon, 14 Jan 2019 16:32:32 GMT60<![CDATA[Reply to describe alerts snort pfsense in wan interface on Mon, 14 Jan 2019 20:09:30 GMT]]>The alert simply describes a condition where a potential buffer overflow was observed. This could be a false positive or it could represent an actual attempt at compromise. To figure out which it was, start by doing research on Google about the rule that fired. Use the GID and SID to narrow the search. The GID is 124 and the SID is 3. GID 124 is the SMTP preprocessor.

More than likely it is a false positive. If you get one or two now and then, I would chalk it up to false positives. If you get several in a row, or get them quite often, I might investigate further.

]]>https://forum.netgate.com/post/817451https://forum.netgate.com/post/817451Mon, 14 Jan 2019 20:09:30 GMT