suricata and nfs findings #12990
-
Version2.4.60 Installation MethodSecurity Onion ISO image Descriptionconfiguration Installation TypeDistributed Locationon-prem with Internet access Hardware SpecsExceeds minimum requirements CPU128 RAM1TB Storage for /60TB Storage for /nsm60TB Network Traffic Collectionspan port Network Traffic Speeds1Gbps to 10Gbps StatusYes, all services on all nodes are running OK Salt StatusNo, there are no failures LogsNo, there are no additional clues DetailHi, we have a lot of findings between our ESX hosts and the nfs service of a nas. Are this false positive? Guidelines
|
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 1 reply
-
|
It's possible but that's something you would have to answer based on your knowledge of the environment and your review of the traffic and the rules that generated the alerts. |
Beta Was this translation helpful? Give feedback.
-
|
OK, it was hard to find but, the surikata alerts are from attack patterns from a vm in our enfironment. This patterns match the surikata patterns :). |
Beta Was this translation helpful? Give feedback.
It's possible but that's something you would have to answer based on your knowledge of the environment and your review of the traffic and the rules that generated the alerts.