""GPL RPC rlogin login failure""

SID: 2100605

Revision: 7

Class Type: unsuccessful-user

Metadata: created_at 2010_09_23, updated_at 2012_08_21

Reference:

  • arachnids

  • 393

Protocol: tcp

Source Network: $HOME_NET

Source Port: 513

Destination Network: $EXTERNAL_NET

Destination Port: any

Flow: from_server,established

Contents:

  • Value: "login incorrect"

Within:

PCRE:

Special Options:

source