GPL NETBIOS SMB NTLMSSP invalid mechlistMIC attempt

alert tcp $EXTERNAL_NET any -> $HOME_NET 139 (
    msg:"GPL NETBIOS SMB NTLMSSP invalid mechlistMIC attempt";
    flow:to_server,established;
    content:"|FF|SMBs"; depth:5; offset:4; nocase;
    content:"`"; depth:1; offset:63;
    content:"|00 00 00|b|06 83 00 00 06|+|06 01 05 05 02|"; within:15; distance:1;
    content:"|06 0A|+|06 01 04 01 82|7|02 02 0A|"; distance:0;
    content:"|A3|>0<|A0|0"; distance:0;
    reference:bugtraq,9633;
    reference:bugtraq,9635;
    reference:cve,2003-0818;
    reference:nessus,12052;
    reference:nessus,12054;
    reference:nessus,12065;
    classtype:attempted-dos;
    sid:2102384; rev:11;
    metadata:created_at 2010_09_23, cve CVE_2003_0818, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2019_07_26;
)