6.4 3000 Series—TCP Signatures
6.4.1 Different signatures in 3000 series
There are several different signatures that belong in the 3000 series:
  • TCP traffic records
  • TCP port scans
  • TCP host sweeps
  • Mail attacks
  • FTP attacks
  • Legacy web attacks
  • NetBIOS attacks
  • SYN flood and TCP hijack attacks
  • TCP applications

The following sections will discuss those different 3000 series signatures in detail.