Samba network problems.

Description

match="getpeername failed. Error was Transport endpoint"

Fires when

Wazuh evaluates a chain top-down. Every rule above this one must match on the same event before this rule is tested at all.

1. 13100 Grouping for the smbd rules. anchor level 0
   decoded_as=smbd
2. 13101 Samba network problems. suppression level 0 this rule
   match="getpeername failed. Error was Transport endpoint"

Rule dependencies

Depends on

• composes · Wazuh if_sid 13100
  • Grouping for the smbd rules.