6.4 3000 Series—TCP Signatures
6.4.2 TCP Traffic Records
The following are TCP Traffic Records:
  • 3000/0—TCP default event levels (severity 1, information)
  • 3000/1—Connection request—tcpmux (severity 1, information)
  • 3000/7—Connection request—echo (severity 1, information)
  • 3000/9—Connection request—discard (severity 1, information)
  • 3000/11—Connection request—systat (severity 1, information)
  • 3000/13—Connection request—daytime (severity 1, information)
  • 3000/15—Connection request—netstat (severity 1, information)
  • 3000/19—Connection request—Chargen (severity 1, information)
  • 3000/20—Connection request—ftp-data (severity 1, information)
  • 3000/21—Connection request—ftp (severity 1, information)
  • 3000/23—Connection request—telnet (severity 1, information)
  • 3000/25—Connection request—smtp (severity 1, information)
  • 3000/37—Connection request—time (severity 1, information)
  • 3000/43—Connection request—whois (severity 1, information)
  • 3000/53—Connection request—dns (severity 1, information)
  • 3000/70—Connection request—gopher (severity 1, information)
  • 3000/79—Connection request—finger (severity 1, information)
  • 3000/80—Connection request—www (severity 1, information)
  • 3000/87—Connection request—link (severity 1, information)
  • 3000/88—Connection request—kerberos-v5 (severity 1, information)
  • 3000/95—Connection request—supdup (severity 1, information)
  • 3000/101—Connection request—hostnames (severity 1, information)
  • 3000/102—Connection request—iso-tsap (severity 1, information)
  • 3000/103—Connection request—x400 (severity 1, information)
  • 3000/104—Connection request—x400-snd (severity 1, information)
  • 3000/105—Connection request—Csnet-ns (severity 1, information)
  • 3000/109—Connection request—pop-2 (severity 1, information)
  • 3000/110—Connection request—pop3 (severity 1, information)
  • 3000/111—Connection request—sunrpc (severity 1, information)
  • 3000/117—Connection request—uucppath (severity 1, information)
  • 3000/119—Connection request—nntp (severity 1, information)
  • 3000/123—Connection request—ntp (severity 1, information)
  • 3000/137—Connection request—netbios (severity 1, information)
  • 3000/138—Connection request—netbios (severity 1, information)
  • 3000/139—Connection request—netbios (severity 1, information)
  • 3000/143—Connection request—imap2 (severity 1, information)
  • 3000/144—Connection request—NeWS (severity 1, information)
  • 3000/177—Connection request—xdmcp (severity 1, information)
  • 3000/178—Connection request—nextstep (severity 1, information)
  • 3000/179—Connection request—bgp (severity 1, information)
  • 3000/194—Connection request—irc (severity 1, information)
  • 3000/220—Connection request—imap3 (severity 1, information)
  • 3000/372—Connection request—ulistserv (severity 1, information)
  • 3000/512—Connection request—exec (severity 3, access)
  • 3000/513—Connection request—login (severity 3, access)
  • 3000/514—Connection request—shell (severity 3, access)
  • 3000/515—Connection request—printer (severity 1, information)
  • 3000/530—Connection request—Courier (severity 1, information)
  • 3000/540—Connection request—uucp (severity 1, information)
  • 3000/600—Connection request—pcserver (severity 1, information)
  • 3000/750—Connection request—kerberos-v4 (severity 1, information)