""GPL RPC rlogin login failure""

SID: 2100611

Revision: 8

Class Type: unsuccessful-user

Metadata: created_at 2010_09_23, updated_at 2012_08_21

Reference:

  • arachnids

  • 392

Protocol: tcp

Source Network: $HOME_NET

Source Port: 513

Destination Network: $EXTERNAL_NET

Destination Port: any

Flow: from_server,established

Contents:

  • Value: "|01|rlogind|3A| Permission denied."

Within:

PCRE:

Special Options:

source