suricata-update list-enabled-sources 26/7/2018 -- 21:00:28 - -- Loading /etc/suricata/update.yaml 26/7/2018 -- 21:00:28 - -- Using data-directory /var/lib/suricata. 26/7/2018 -- 21:00:28 - -- Using Suricata configuration /etc/suricata/suricata.yaml 26/7/2018 -- 21:00:28 - -- Using /etc/suricata/rules for Suricata provided rules. 26/7/2018 -- 21:00:28 - -- Found Suricata version 4.0.4 at /usr/bin/suricata. From /etc/suricata/update.yaml: - https://rules.emergingthreats.net/open/suricata-%(__version__)s/emerging.rules.tar.gz - https://sslbl.abuse.ch/blacklist/sslblacklist.rules - https://www.snort.org/rules/snortrules-snapshot-29111.tar.gz?oinkcode=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx Enabled sources: - oisf/trafficid - ptresearch/attackdetection - et/open ********************************************************** suricata-update 26/7/2018 -- 20:58:35 - -- Loading /etc/suricata/update.yaml 26/7/2018 -- 20:58:35 - -- Using data-directory /var/lib/suricata. 26/7/2018 -- 20:58:35 - -- Using Suricata configuration /etc/suricata/suricata.yaml 26/7/2018 -- 20:58:35 - -- Using /etc/suricata/rules for Suricata provided rules. 26/7/2018 -- 20:58:35 - -- Found Suricata version 4.0.4 at /usr/bin/suricata. 26/7/2018 -- 20:58:35 - -- Loading /etc/suricata/disable.conf. 26/7/2018 -- 20:58:35 - -- Loading /etc/suricata/enable.conf. 26/7/2018 -- 20:58:35 - -- Loading /etc/suricata/modify.conf. 26/7/2018 -- 20:58:35 - -- Loading /etc/suricata/drop.conf. 26/7/2018 -- 20:58:35 - -- Loading /etc/suricata/suricata.yaml 26/7/2018 -- 20:58:35 - -- Disabling rules with proto ntp 26/7/2018 -- 20:58:35 - -- Disabling rules with proto modbus 26/7/2018 -- 20:58:35 - -- Disabling rules with proto enip 26/7/2018 -- 20:58:35 - -- Disabling rules with proto dnp3 26/7/2018 -- 20:58:35 - -- Disabling rules with proto nfs 26/7/2018 -- 20:58:35 - -- Last download less than 15 minutes ago. Not downloading https://raw.githubusercontent.com/jasonish/suricata-trafficid/master/rules/traffic-id.rules. 26/7/2018 -- 20:58:35 - -- Last download less than 15 minutes ago. Not downloading https://rules.emergingthreats.net/open/suricata-4.0.4/emerging.rules.tar.gz. 26/7/2018 -- 20:58:35 - -- Last download less than 15 minutes ago. Not downloading https://sslbl.abuse.ch/blacklist/sslblacklist.rules. 26/7/2018 -- 20:58:35 - -- Last download less than 15 minutes ago. Not downloading https://www.snort.org/rules/snortrules-snapshot-29111.tar.gz?oinkcode=5202df15d4c9f81f35a33abc914687bcd933266f. 26/7/2018 -- 20:58:37 - -- Last download less than 15 minutes ago. Not downloading https://raw.githubusercontent.com/ptresearch/AttackDetection/master/pt.rules.tar.gz. 26/7/2018 -- 20:58:37 - -- Ignoring file rules/emerging-deleted.rules 26/7/2018 -- 20:58:37 - -- Ignoring file rules/deleted.rules 26/7/2018 -- 20:58:42 - -- Loaded 60656 rules. 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20314] PROTOCOL-VOIP Via header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20314] PROTOCOL-VOIP Via header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:11980] PROTOCOL-VOIP Attribute header buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:11980] PROTOCOL-VOIP Attribute header buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20349] PROTOCOL-VOIP Subject header XSS injection attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20349] PROTOCOL-VOIP Subject header XSS injection attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:19334] PROTOCOL-VOIP Content-Type header invalid format too many slashes 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:19334] PROTOCOL-VOIP Content-Type header invalid format too many slashes 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:12007] PROTOCOL-VOIP outbound 401 Unauthorized message 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:12007] PROTOCOL-VOIP outbound 401 Unauthorized message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20379] PROTOCOL-VOIP Date header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20379] PROTOCOL-VOIP Date header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:19385] PROTOCOL-VOIP Media header description field overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:19385] PROTOCOL-VOIP Media header description field overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:20414] PROTOCOL-VOIP outbound 408 Request Timeout message 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:20414] PROTOCOL-VOIP outbound 408 Request Timeout message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:21150] PROTOCOL-VOIP Grandstream networks denial of service 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:21150] PROTOCOL-VOIP Grandstream networks denial of service 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:28993] PROTOCOL-VOIP Sipvicious User-Agent detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:28993] PROTOCOL-VOIP Sipvicious User-Agent detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:12112] PROTOCOL-VOIP Sivus scanner detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:12112] PROTOCOL-VOIP Sivus scanner detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:27899] PROTOCOL-VOIP Possible SIP OPTIONS service information gathering attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:27899] PROTOCOL-VOIP Possible SIP OPTIONS service information gathering attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:20417] PROTOCOL-VOIP outbound 415 Unsupported Media Type message 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:20417] PROTOCOL-VOIP outbound 415 Unsupported Media Type message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:11968] PROTOCOL-VOIP inbound INVITE message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:11968] PROTOCOL-VOIP inbound INVITE message 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:12177] PROTOCOL-VOIP outbound 415 Unsupported Media Type message 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:12177] PROTOCOL-VOIP outbound 415 Unsupported Media Type message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20337] PROTOCOL-VOIP To header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20337] PROTOCOL-VOIP To header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20383] PROTOCOL-VOIP Time header contains negative value 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20383] PROTOCOL-VOIP Time header contains negative value 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:19389] PROTOCOL-VOIP REGISTER flood 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:19389] PROTOCOL-VOIP REGISTER flood 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:20402] PROTOCOL-VOIP Response code 405 Method Not Allowed response flood 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:20402] PROTOCOL-VOIP Response code 405 Method Not Allowed response flood 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: DC_SERVERS: [1:10002558] [PT OPEN] DCShadow Replication Attempt - DRSUAPI_REPLICA_ADD from non-DC 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: DC_SERVERS: [1:10002558] [PT OPEN] DCShadow Replication Attempt - DRSUAPI_REPLICA_ADD from non-DC 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:21103] PROTOCOL-VOIP Digium Asterisk channel driver denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:21103] PROTOCOL-VOIP Digium Asterisk channel driver denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:27903] PROTOCOL-VOIP Ghost call attack attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:27903] PROTOCOL-VOIP Ghost call attack attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20421] PROTOCOL-VOIP INVITE message Content-Length header size of zero 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20421] PROTOCOL-VOIP INVITE message Content-Length header size of zero 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20306] PROTOCOL-VOIP CSeq header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20306] PROTOCOL-VOIP CSeq header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:11972] PROTOCOL-VOIP Max-Forwards value over 70 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:11972] PROTOCOL-VOIP Max-Forwards value over 70 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:12181] PROTOCOL-VOIP outbound 404 Not Found 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:12181] PROTOCOL-VOIP outbound 404 Not Found 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20341] PROTOCOL-VOIP To header unquoted tokens in field attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20341] PROTOCOL-VOIP To header unquoted tokens in field attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20371] PROTOCOL-VOIP Contact header whitespace in field attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20371] PROTOCOL-VOIP Contact header whitespace in field attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20328] PROTOCOL-VOIP From header missing terminating quote 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20328] PROTOCOL-VOIP From header missing terminating quote 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:19377] PROTOCOL-VOIP Origin invalid header 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:19377] PROTOCOL-VOIP Origin invalid header 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20406] PROTOCOL-VOIP inbound 501 Not Implemented message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20406] PROTOCOL-VOIP inbound 501 Not Implemented message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20393] PROTOCOL-VOIP BYE flood 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20393] PROTOCOL-VOIP BYE flood 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20310] PROTOCOL-VOIP CSeq header multiple CSeq headers 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20310] PROTOCOL-VOIP CSeq header multiple CSeq headers 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:12680] PROTOCOL-VOIP Via header hostname buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:12680] PROTOCOL-VOIP Via header hostname buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:11992] PROTOCOL-VOIP Content-Type header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:11992] PROTOCOL-VOIP Content-Type header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:20297] PROTOCOL-VOIP outbound INVITE message 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:20297] PROTOCOL-VOIP outbound INVITE message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:12172] PROTOCOL-VOIP inbound 501 Not Implemented message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:12172] PROTOCOL-VOIP inbound 501 Not Implemented message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20375] PROTOCOL-VOIP Contact header missing terminating quote 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20375] PROTOCOL-VOIP Contact header missing terminating quote 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20332] PROTOCOL-VOIP To header contains recursive URL-encoded data 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20332] PROTOCOL-VOIP To header contains recursive URL-encoded data 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:19381] PROTOCOL-VOIP Session Name header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:19381] PROTOCOL-VOIP Session Name header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:36734] PROTOCOL-VOIP javascript found in SIP headers attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:36734] PROTOCOL-VOIP javascript found in SIP headers attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: [3:32211] PROTOCOL-VOIP missing media application format parameter denial-of-service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: [3:32211] PROTOCOL-VOIP missing media application format parameter denial-of-service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20362] PROTOCOL-VOIP Call-ID header multiple Call-ID headers 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20362] PROTOCOL-VOIP Call-ID header multiple Call-ID headers 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: [3:34023] PROTOCOL-VOIP Unity Conversation Manager record-route INVITE anomaly denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20397] PROTOCOL-VOIP INVITE flood 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20397] PROTOCOL-VOIP INVITE flood 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:11996] PROTOCOL-VOIP CSeq header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:11996] PROTOCOL-VOIP CSeq header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20301] PROTOCOL-VOIP TEL URI type overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20301] PROTOCOL-VOIP TEL URI type overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:16351] PROTOCOL-VOIP CSeq buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:16351] PROTOCOL-VOIP CSeq buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20320] PROTOCOL-VOIP From header XSS injection attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20320] PROTOCOL-VOIP From header XSS injection attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:19337] PROTOCOL-VOIP invalid SIP-Version field 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:19337] PROTOCOL-VOIP invalid SIP-Version field 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: [3:32215] PROTOCOL-VOIP missing media application format parameter denial-of-service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: [3:32215] PROTOCOL-VOIP missing media application format parameter denial-of-service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20366] PROTOCOL-VOIP Contact header XSS injection attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20366] PROTOCOL-VOIP Contact header XSS injection attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: [3:30886] PROTOCOL-VOIP Cisco SIP malformed date header buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: [3:30886] PROTOCOL-VOIP Cisco SIP malformed date header buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20385] PROTOCOL-VOIP Version header overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20385] PROTOCOL-VOIP Version header overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: [3:29441] PROTOCOL-VOIP CISCO Telepresence VCS SIP denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: [3:29441] PROTOCOL-VOIP CISCO Telepresence VCS SIP denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:11984] PROTOCOL-VOIP Time header contains long value 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:11984] PROTOCOL-VOIP Time header contains long value 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:45578] PROTOCOL-VOIP Mr.SIP options request denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:45578] PROTOCOL-VOIP Mr.SIP options request denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:11979] PROTOCOL-VOIP Media header port field invalid value 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:11979] PROTOCOL-VOIP Media header port field invalid value 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:36735] PROTOCOL-VOIP javascript found in SIP headers attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:36735] PROTOCOL-VOIP javascript found in SIP headers attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20324] PROTOCOL-VOIP From header whitespace in field attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20324] PROTOCOL-VOIP From header whitespace in field attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20354] PROTOCOL-VOIP Call-ID header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20354] PROTOCOL-VOIP Call-ID header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: [3:30890] PROTOCOL-VOIP Content-Type media type overflow denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: [3:30890] PROTOCOL-VOIP Content-Type media type overflow denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20389] PROTOCOL-VOIP Attribute header buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20389] PROTOCOL-VOIP Attribute header buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: [3:30282] PROTOCOL-VOIP Cisco IOS SIP header denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: [3:30282] PROTOCOL-VOIP Cisco IOS SIP header denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:33445] PROTOCOL-VOIP Digium Asterisk SIP channel driver denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:33445] PROTOCOL-VOIP Digium Asterisk SIP channel driver denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:11988] PROTOCOL-VOIP From header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:11988] PROTOCOL-VOIP From header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20424] PROTOCOL-VOIP Sivus scanner detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20424] PROTOCOL-VOIP Sivus scanner detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:13590] PROTOCOL-VOIP OPTIONS message Call-ID header request misplaced - after terminating newline 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:13590] PROTOCOL-VOIP OPTIONS message Call-ID header request misplaced - after terminating newline 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:45582] PROTOCOL-VOIP Mr.SIP subscribe request denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:45582] PROTOCOL-VOIP Mr.SIP subscribe request denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:11983] PROTOCOL-VOIP Time header contains negative value 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:11983] PROTOCOL-VOIP Time header contains negative value 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20318] PROTOCOL-VOIP From header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20318] PROTOCOL-VOIP From header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20344] PROTOCOL-VOIP To header missing terminating quote 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20344] PROTOCOL-VOIP To header missing terminating quote 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:12002] PROTOCOL-VOIP BYE flood 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:12002] PROTOCOL-VOIP BYE flood 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: DC_SERVERS: [1:10002557] [PT OPEN] DCShadow Replication Attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: DC_SERVERS: [1:10002557] [PT OPEN] DCShadow Replication Attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20358] PROTOCOL-VOIP Call-ID header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20358] PROTOCOL-VOIP Call-ID header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:19364] PROTOCOL-VOIP Time Stop header invalid value 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:19364] PROTOCOL-VOIP Time Stop header invalid value 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20409] PROTOCOL-VOIP inbound 481 Call/Leg Transaction Does Not Exist 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20409] PROTOCOL-VOIP inbound 481 Call/Leg Transaction Does Not Exist 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20313] PROTOCOL-VOIP Via header missing SIP field 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20313] PROTOCOL-VOIP Via header missing SIP field 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:11971] PROTOCOL-VOIP CSeq buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:11971] PROTOCOL-VOIP CSeq buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20348] PROTOCOL-VOIP Subject header XSS injection attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20348] PROTOCOL-VOIP Subject header XSS injection attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:19333] PROTOCOL-VOIP Content-Type header invalid format too many slashes 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:19333] PROTOCOL-VOIP Content-Type header invalid format too many slashes 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:12006] PROTOCOL-VOIP outbound INVITE message 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:12006] PROTOCOL-VOIP outbound INVITE message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20378] PROTOCOL-VOIP Date header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20378] PROTOCOL-VOIP Date header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:19384] PROTOCOL-VOIP Session Name invalid header attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:19384] PROTOCOL-VOIP Session Name invalid header attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:20413] PROTOCOL-VOIP outbound 100 Trying message 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:20413] PROTOCOL-VOIP outbound 100 Trying message 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:20416] PROTOCOL-VOIP outbound 604 Does Not Exist Anywhere message 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:20416] PROTOCOL-VOIP outbound 604 Does Not Exist Anywhere message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20317] PROTOCOL-VOIP Via header invalid seperators 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20317] PROTOCOL-VOIP Via header invalid seperators 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:27904] PROTOCOL-VOIP Excessive number of SIP 4xx responses potential user or password guessing attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:27904] PROTOCOL-VOIP Excessive number of SIP 4xx responses potential user or password guessing attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:11975] PROTOCOL-VOIP Via header missing SIP field 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:11975] PROTOCOL-VOIP Via header missing SIP field 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:12176] PROTOCOL-VOIP inbound 415 Unsupported Media Type message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:12176] PROTOCOL-VOIP inbound 415 Unsupported Media Type message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20336] PROTOCOL-VOIP To header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20336] PROTOCOL-VOIP To header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:12171] PROTOCOL-VOIP outbound 408 Request Timeout message 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:12171] PROTOCOL-VOIP outbound 408 Request Timeout message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20382] PROTOCOL-VOIP Media header port field invalid value 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20382] PROTOCOL-VOIP Media header port field invalid value 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20331] PROTOCOL-VOIP From header multiple From headers 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20331] PROTOCOL-VOIP From header multiple From headers 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:19388] PROTOCOL-VOIP Media header description field format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:19388] PROTOCOL-VOIP Media header description field format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:20401] PROTOCOL-VOIP Response code 415 Unsupported Media Type response flood 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:20401] PROTOCOL-VOIP Response code 415 Unsupported Media Type response flood 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:21102] PROTOCOL-VOIP Digium Asterisk channel driver denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:21102] PROTOCOL-VOIP Digium Asterisk channel driver denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:27902] PROTOCOL-VOIP Possible SIP OPTIONS service information gathering attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:27902] PROTOCOL-VOIP Possible SIP OPTIONS service information gathering attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20420] PROTOCOL-VOIP INVITE message invalid IP address 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20420] PROTOCOL-VOIP INVITE message invalid IP address 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20305] PROTOCOL-VOIP CSeq header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20305] PROTOCOL-VOIP CSeq header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:12683] PROTOCOL-VOIP From header field buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:12683] PROTOCOL-VOIP From header field buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:11995] PROTOCOL-VOIP Content-Type header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:11995] PROTOCOL-VOIP Content-Type header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:12180] PROTOCOL-VOIP inbound 404 Not Found 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:12180] PROTOCOL-VOIP inbound 404 Not Found 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20340] PROTOCOL-VOIP To header unquoted tokens in field attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20340] PROTOCOL-VOIP To header unquoted tokens in field attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:12175] PROTOCOL-VOIP outbound 604 Does Not Exist Anywhere message 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:12175] PROTOCOL-VOIP outbound 604 Does Not Exist Anywhere message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20370] PROTOCOL-VOIP Contact header whitespace in field attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20370] PROTOCOL-VOIP Contact header whitespace in field attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20335] PROTOCOL-VOIP To header XSS injection attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20335] PROTOCOL-VOIP To header XSS injection attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:19376] PROTOCOL-VOIP Origin header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:19376] PROTOCOL-VOIP Origin header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20405] PROTOCOL-VOIP inbound 408 Request Timeout message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20405] PROTOCOL-VOIP inbound 408 Request Timeout message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20670] PROTOCOL-VOIP Digium Asterisk data length field overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20392] PROTOCOL-VOIP Digium Asterisk Attribute header rtpmap field buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20392] PROTOCOL-VOIP Digium Asterisk Attribute header rtpmap field buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20309] PROTOCOL-VOIP CSeq header multiple CSeq headers 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20309] PROTOCOL-VOIP CSeq header multiple CSeq headers 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:11999] PROTOCOL-VOIP Via header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:11999] PROTOCOL-VOIP Via header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20296] PROTOCOL-VOIP inbound INVITE message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20296] PROTOCOL-VOIP inbound INVITE message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: [3:32207] PROTOCOL-VOIP missing media application format parameter denial-of-service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: [3:32207] PROTOCOL-VOIP missing media application format parameter denial-of-service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20374] PROTOCOL-VOIP Contact header missing terminating quote 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20374] PROTOCOL-VOIP Contact header missing terminating quote 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20323] PROTOCOL-VOIP From header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20323] PROTOCOL-VOIP From header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:19380] PROTOCOL-VOIP Session Name header overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:19380] PROTOCOL-VOIP Session Name header overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:36733] PROTOCOL-VOIP javascript found in SIP headers attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:36733] PROTOCOL-VOIP javascript found in SIP headers attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: [3:32210] PROTOCOL-VOIP missing media application format parameter denial-of-service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: [3:32210] PROTOCOL-VOIP missing media application format parameter denial-of-service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20361] PROTOCOL-VOIP Call-ID header invalid seperators 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20361] PROTOCOL-VOIP Call-ID header invalid seperators 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:19375] PROTOCOL-VOIP Origin header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:19375] PROTOCOL-VOIP Origin header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: [3:30885] PROTOCOL-VOIP Cisco SIP malformed date header buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: [3:30885] PROTOCOL-VOIP Cisco SIP malformed date header buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: [3:34022] PROTOCOL-VOIP Cisco Unity Connection malformed contact header denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: [3:34022] PROTOCOL-VOIP Cisco Unity Connection malformed contact header denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20396] PROTOCOL-VOIP INVITE flood attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20396] PROTOCOL-VOIP INVITE flood attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:11987] PROTOCOL-VOIP Via header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:11987] PROTOCOL-VOIP Via header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20300] PROTOCOL-VOIP SIP URI type overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20300] PROTOCOL-VOIP SIP URI type overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:12167] PROTOCOL-VOIP SIP URI multiple at signs in message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:12167] PROTOCOL-VOIP SIP URI multiple at signs in message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20327] PROTOCOL-VOIP From header unquoted tokens in field attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20327] PROTOCOL-VOIP From header unquoted tokens in field attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:19336] PROTOCOL-VOIP Content-Type header invalid format missing slash 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:19336] PROTOCOL-VOIP Content-Type header invalid format missing slash 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: [3:32214] PROTOCOL-VOIP missing media application format parameter denial-of-service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: [3:32214] PROTOCOL-VOIP missing media application format parameter denial-of-service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20365] PROTOCOL-VOIP Contact header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20365] PROTOCOL-VOIP Contact header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: [3:30889] PROTOCOL-VOIP Content-Type media type overflow denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: [3:30889] PROTOCOL-VOIP Content-Type media type overflow denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20384] PROTOCOL-VOIP Time header contains long value 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20384] PROTOCOL-VOIP Time header contains long value 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:12074] PROTOCOL-VOIP outbound 100 Trying message 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:12074] PROTOCOL-VOIP outbound 100 Trying message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:11991] PROTOCOL-VOIP CSeq header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:11991] PROTOCOL-VOIP CSeq header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20427] PROTOCOL-VOIP OpenSBC VIA header denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20427] PROTOCOL-VOIP OpenSBC VIA header denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:45577] PROTOCOL-VOIP Mr.SIP invite request denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:45577] PROTOCOL-VOIP Mr.SIP invite request denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:19302] PROTOCOL-VOIP Max-Forwards header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:19302] PROTOCOL-VOIP Max-Forwards header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20347] PROTOCOL-VOIP To header multiple To headers 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20347] PROTOCOL-VOIP To header multiple To headers 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20353] PROTOCOL-VOIP Expires header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20353] PROTOCOL-VOIP Expires header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: [3:45464] PROTOCOL-VOIP Cisco Unified Customer Voice Portal denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20388] PROTOCOL-VOIP T.38 fax EC attribute buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20388] PROTOCOL-VOIP T.38 fax EC attribute buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:12359] PROTOCOL-VOIP Digium Asterisk data length field overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:13589] PROTOCOL-VOIP OPTIONS message Via header request misplaced - after terminating newline 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:13589] PROTOCOL-VOIP OPTIONS message Via header request misplaced - after terminating newline 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:45581] PROTOCOL-VOIP Mr.SIP options request denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:45581] PROTOCOL-VOIP Mr.SIP options request denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:11982] PROTOCOL-VOIP To header contains recursive URL-encoded data 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:11982] PROTOCOL-VOIP To header contains recursive URL-encoded data 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20351] PROTOCOL-VOIP Subject header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20351] PROTOCOL-VOIP Subject header format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:12001] PROTOCOL-VOIP Version header overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:12001] PROTOCOL-VOIP Version header overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20357] PROTOCOL-VOIP Call-ID header XSS injection attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20357] PROTOCOL-VOIP Call-ID header XSS injection attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:26426] PROTOCOL-VOIP Digium Asterisk SIP SDP header parsing stack buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:26426] PROTOCOL-VOIP Digium Asterisk SIP SDP header parsing stack buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:19387] PROTOCOL-VOIP Media header description field format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:19387] PROTOCOL-VOIP Media header description field format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20408] PROTOCOL-VOIP inbound 415 Unsupported Media Type message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20408] PROTOCOL-VOIP inbound 415 Unsupported Media Type message 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: DC_SERVERS: [1:10002559] [PT OPEN] DCShadow: Fake DC Creation 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: DC_SERVERS: [1:10002559] [PT OPEN] DCShadow: Fake DC Creation 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:32042] OS-OTHER Bash environment variable injection attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:32042] OS-OTHER Bash environment variable injection attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:20419] PROTOCOL-VOIP outbound 401 Unauthorized message 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:20419] PROTOCOL-VOIP outbound 401 Unauthorized message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20312] PROTOCOL-VOIP Max-Forwards header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20312] PROTOCOL-VOIP Max-Forwards header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:11970] PROTOCOL-VOIP Cisco 7940/7960 INVITE Remote-Party-ID header denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:11970] PROTOCOL-VOIP Cisco 7940/7960 INVITE Remote-Party-ID header denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:12179] PROTOCOL-VOIP outbound 481 Call/Leg Transaction Does Not Exist 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:12179] PROTOCOL-VOIP outbound 481 Call/Leg Transaction Does Not Exist 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20339] PROTOCOL-VOIP To header whitespace in field attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20339] PROTOCOL-VOIP To header whitespace in field attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:12005] PROTOCOL-VOIP Connection header invalid value 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:12005] PROTOCOL-VOIP Connection header invalid value 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20377] PROTOCOL-VOIP Content-Type header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20377] PROTOCOL-VOIP Content-Type header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:20412] PROTOCOL-VOIP outbound 404 Not Found 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:20412] PROTOCOL-VOIP outbound 404 Not Found 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20423] PROTOCOL-VOIP OPTIONS message Call-ID header request misplaced - after terminating newline 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20423] PROTOCOL-VOIP OPTIONS message Call-ID header request misplaced - after terminating newline 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20316] PROTOCOL-VOIP Via header invalid seperators 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20316] PROTOCOL-VOIP Via header invalid seperators 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20343] PROTOCOL-VOIP To header invalid seperators 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20343] PROTOCOL-VOIP To header invalid seperators 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:12170] PROTOCOL-VOIP inbound 408 Request Timeout message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:12170] PROTOCOL-VOIP inbound 408 Request Timeout message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20381] PROTOCOL-VOIP Remote-Party-ID header hexadecimal characters in IP address field 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20381] PROTOCOL-VOIP Remote-Party-ID header hexadecimal characters in IP address field 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20330] PROTOCOL-VOIP From header multiple From headers 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20330] PROTOCOL-VOIP From header multiple From headers 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:19379] PROTOCOL-VOIP Session Name header overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:19379] PROTOCOL-VOIP Session Name header overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:20400] PROTOCOL-VOIP Response code 415 Unsupported Media Type response flood 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:20400] PROTOCOL-VOIP Response code 415 Unsupported Media Type response flood 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20395] PROTOCOL-VOIP REGISTER flood 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20395] PROTOCOL-VOIP REGISTER flood 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:21101] PROTOCOL-VOIP Digium Asterisk channel driver denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:21101] PROTOCOL-VOIP Digium Asterisk channel driver denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:27901] PROTOCOL-VOIP Ghost call attack attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:27901] PROTOCOL-VOIP Ghost call attack attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20304] PROTOCOL-VOIP SIP URI possible format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20304] PROTOCOL-VOIP SIP URI possible format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:12682] PROTOCOL-VOIP From header field buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:12682] PROTOCOL-VOIP From header field buffer overflow attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:11994] PROTOCOL-VOIP Contact header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:11994] PROTOCOL-VOIP Contact header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20299] PROTOCOL-VOIP Invalid request spaces at end of request line attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20299] PROTOCOL-VOIP Invalid request spaces at end of request line attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: [3:33870] PROTOCOL-VOIP Cisco TelePresence Video Communication Server SDP media description denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: [3:33870] PROTOCOL-VOIP Cisco TelePresence Video Communication Server SDP media description denial of service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:12174] PROTOCOL-VOIP inbound 604 Does Not Exist Anywhere message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:12174] PROTOCOL-VOIP inbound 604 Does Not Exist Anywhere message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20334] PROTOCOL-VOIP To header XSS injection attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20334] PROTOCOL-VOIP To header XSS injection attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:19383] PROTOCOL-VOIP Session Name invalid header attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:19383] PROTOCOL-VOIP Session Name invalid header attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: [3:32209] PROTOCOL-VOIP missing media application format parameter denial-of-service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: [3:32209] PROTOCOL-VOIP missing media application format parameter denial-of-service attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20404] PROTOCOL-VOIP inbound 100 Trying message 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20404] PROTOCOL-VOIP inbound 100 Trying message 26/7/2018 -- 20:58:42 - -- Rule has unknown source address var and will be disabled: SIP_SERVERS: # [1:20399] PROTOCOL-VOIP Response code 420 Bad Extension response flood 26/7/2018 -- 20:58:42 - -- Rule has unknown source port var and will be disabled: SIP_PORTS: # [1:20399] PROTOCOL-VOIP Response code 420 Bad Extension response flood 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20308] PROTOCOL-VOIP CSeq header method mismatch attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20308] PROTOCOL-VOIP CSeq header method mismatch attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:11998] PROTOCOL-VOIP To header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:11998] PROTOCOL-VOIP To header invalid characters detected 26/7/2018 -- 20:58:42 - -- Rule has unknown dest address var and will be disabled: SIP_SERVERS: # [1:20303] PROTOCOL-VOIP SIP URI possible format string attempt 26/7/2018 -- 20:58:42 - -- Rule has unknown dest port var and will be disabled: SIP_PORTS: # [1:20303] PROTOCOL-VOIP SIP URI possible format string attempt 26/7/2018 -- 20:58:42 -