Signatures not firing correctly

I'm having an issue with signatures not firing correctly. Some of the backdoor trojan signatures are firing, the NSDB says that it is looking for a certain string in the packet going over a certain port. This has happened on several signatures. I get the discrepancy when I look at the context buffer and do not see the string that it is looking for.
Are these signatures firing simply by going over a particular point? It seems that the sensing engine is not looking at the packet, just the port.
Other than filtering out thousands of false positives, is there any way to get the signatures to fire correctly?
Any help would be appreciated.
-Steve

FTP activity may fire these signatures simply because quite a few of the back doors install FTP servers. We have disabled these signatures by default because they detect fairly old back doors and may false positive. That being said we will research these signatures for possible modification in an upcoming signature release. It would be extremely helpful if you could provide a traffic sample of the activity your describing, without one it will be difficult to ensure that any new versions address your issue.

Similar Messages

  • Added text & signatures do not print correctly

    I am using Acrobat Reader v10.4.4 on my iPad Mini with IOS 6.1.2 and am having issues printing. I can open any PDF and have it displayed correctly. I can add text and signatures and the document is saved correctly because it can be opened after the changes are made and they are still there. When I try to print the document where I have added text and signatures to, the document does not print correctly. All of the text and the signature are shrunk to a very small size and appear in the lower left hand of the page.
    I depend on my apps to work they way they should and having this issue makes my work very hard. I have to be very creative and perform unnecessary steps to get my PDF's to print the way they should. Does anyone have some insight in to this bug?

    Hi,
    Thanks for reporting this issue. We would like to investigate this issue at our end and if you could share one such pdf file in which you are facing the issue at [email protected], that would greatly help us.
    Thanks,
    Ankit

  • BPS_WB: Please Wait Dialog Box not Displaying correctly???

    When we switched our Planning Interfaces to using the New Planning Interface Design the Please Wiat Dialog Box does not display correctly. 
    When a Request is fired and the client is waiting for the Response all that shows is a white block in the middle of the screen with no dialog screen or other information. 
    It maybe associated with the following:
    function bpsOpenURLSelf(doIt, url)
          if (doIt) {
            try {
                document.body.style.cursor = "wait"; // works only in IE
            } catch (ex) {} // ignore
            open(url,'_self');
          // note: function with doIt==false is used to check
          //       existence of the opener window
    Or it may be associated with a CSS issue?
    I am currently using IE 6.0.2900.2180.
    Any thoughts would be appreciated!
    Thanks, ATC

    Hi Alan,
    please implement SAP note 845305.
    Regards
    Marc
    SAP NetWeaver RIG

  • Key-nextrec not firing in forms 10g

    I have a code in the above trigger, but it is not firing, I have it in the block property and no other place in the form
    message('In key next rec----'); message(' ');
    IF :SYSTEM.Last_Record = 'TRUE' Then
    Null;
    Else
    next_record;
    End If;

    when-new-record-instance runs when you navigate to the next record.
    Key-Nxtrec (Nxtrec is the correct spelling) only runs when you press the key assigned to call that trigger. In my environment, it is the Shift+ Down-Arrow key, but it could be just Down-Arrow -- it all depends on what key sequence is assigned to Forms Function Number 67 in your Forms Resource file, FMRWEB.res (or fmrusw.res).
    So if the trigger runs when you press the correct keyboard key, and you issue the message but do not call the Next_Record; built-in, focus will not navigate to the next record in your running form.

  • PDFs are not shown correctly at more than 150% size

    Hi,
    we use Adobe Reader 8.1.2 and we can´t change it in our company.
    we now have the problems, that a few documents are not shown correctly, when they are shown with more than 150% on the screen.
    at 150% the signature and some lines are shown, when we look at the document witz 177% the lines and the signatures disappear.
    Does someone have the same problem AND a solution?
    Hajo

    Hi,
    I'm having exactly the same problem with my 80gb ipod on my new laptop which is also running Windows 7 64 bit and iTunes 10.1.1.4.
    I initially just tried syncing photos and according to iTunes it was still syncing after 4 hours, this was for 6700 photos and I wasn't asking for full resolution, but iPod just said Connected - Eject before disconnecting. I couldn't disconnect and in the end had to close iTunes before disconnecting, then there were no photos on the iPod.
    Disconnected, rebooted then when I connected the iPod I got the message that it was synced to another PC which I expected so i click to erase and synch, iPod initially showed synching then went to Connected - eject message but itunes was saying "finishing synch" it showed this for hours and out of 6543 songs on the PC it was onlt showing 6002 on iPod. I stopped the synch trie dejecting but got same message Iancenaz got. Again had to close iTunes before I could disconnect iPod safely.
    I'm going to try synching it back on mhy old laptop which is running Windows XP and an older version of iTunes as I suspect its either a Windows 7 or iTunes 10 problem.

  • On New Instance computation not firing if user fails authorisation

    Hi there,
    In my Apex 4 application I have:
    - An application-level field
    - An On New Instance computation that computes the above field (no conditions or authorisations set on it)
    - A public page
    - A secure page to which the user I use to log in doesn't have access
    If, after logging in, I go straight to the public page and then to the secure page, I get the error "user not authorised" but the application item is computed.
    However, if I go straight to the secure page after logging in the application I get the error message but item is not computed! (I know that because I am displaying the item in the error page template using the format &F_FIELD.)
    I thought On-New-Instance-Anything should always be executed.. but that does not seem to be the case... Or am I missing something?
    How to fix this? I need the on new instance computation to always execute even if the user fails authorisation.
    Thanks
    Luis

    - If I understand you correctly, you are suggesting to move the application computation into the login page, as a page computation?An assignment statement in a PL/SQL process that runs after the login process could work, but it would be safer to use an application-level computation that fires only after APP_USER is definitely set to the authenticated username. The condition would be something like "if :MY_USER_ID_ITEM is null and :APP_USER not in ('nobody', 'HTMLDB_PUBLIC_USER','APEX_PUBLIC_USER','ANONYMOUS')...". Then your application will work if you decide not to have a login page someday, e.g., if you switch to SSO.
    If the computation point is "after submit", why do I need to worry about "per session"? It will be fired only when the user enter/re-enter the system, right?Yes.
    My logout URL was constructed by page wizard. I don't see any session id there. Should I look anywhere specific?If you still have problems with an on-new instance event not firing after a logout URL results in a new session being created let me know. It may be moot for this case.
    Scott

  • ActionListener not firing within panelGrid (which is within a dataTable)

    I have a page with several forms on it:
    <h:form>
    ... commandLinks here are working
    </h:form>
    <h:form>
    <h:panelGrid>
    ...the actionListener here is firing
    </h:panelGrid>
    </h:form>
    <h:form>
    ... commandLinks here are working
    </h:form>
    <h:dataTable value="#{collection}" var="item">
    <h:column>
    <h:form>
    <h:panelGrid>
    ...actionListeners here ARE NOT FIRING!
    </h:panelGrid>
    </h:form>
    </h:column>
    </h:dataTable>
    I've tried many things to get this to work. I've checked spelling at least 10 times. I've put the whole page in a single form. Nothing seems to work. The bean associated with the actionListener is not even being instantiated unless I include a value binding expression in the form somewhere, but even then the listener is still not fired.
    So, please tell me if this is a known bug, or if it should work. I'm using JSF 1.1_1.
    All the data and form fields get displayed correctly, just the actionListeners are not firing. I've tried both methods of triggering an actionListener. Neither work.
    Why doesn't anyone from Sun post here anymore?????

    Could you please copy/paste the whole jsp page?I had to abandon the previous page structure due to time constraints. But, now I am having the same problem on another page, pasted below. In this case, the contactInfoForm.populate actionListeners are not firing:
    <?xml version="1.0" ?>
    <jsp:root version="2.0"
      xmlns:jsp="http://java.sun.com/JSP/Page"
      xmlns:f="http://java.sun.com/jsf/core"
      xmlns:h="http://java.sun.com/jsf/html"
      xmlns:c="http://java.sun.com/jstl/core"
      xmlns:x="http://java.sun.com/jstl/xml"
      xmlns:fmt="http://java.sun.com/jstl/fmt"
      xmlns:t="http://jakarta.apache.org/struts/tags-tiles"
      xmlns:htm="http://jsftutorials.net/htmLib">
      <f:subview id="content">
        <htm:div styleClass="heading">
          <htm:h2>
             <h:outputFormat value="#{msgs[heading]}">
                <f:param value="#{param.firstName}" />
                <f:param value="#{param.lastName}" />
             </h:outputFormat>
          </htm:h2>
        </htm:div>
        <htm:div styleClass="contentContainer">
        <h:messages/>
        <h:form>
          <h:commandLink id="backToPersons" styleClass="commandLink1" action="section.persons">
             <h:outputText value="#{msgs['persons.common.command.backToPersons']}"/>
          </h:commandLink>
        </h:form>
        <h:form style="padding-top: 10px">
          <h:commandLink id="newContactInfo" styleClass="commandLink1" action="/persons/contactInfo/newContactInfo">
             <h:outputText value="#{msgs['persons.person.contactInfo.list.command.new']}"/>
             <f:param name="personId" value="#{param.personId}"/>
             <f:param name="firstName" value="#{param.firstName}"/>
             <f:param name="lastName" value="#{param.lastName}"/>
          </h:commandLink>
        </h:form>
        <h:form>
           <h:dataTable value="#{contactInfoForm.contactInfoList}" var="contactInfo" cellpadding="5" cellspacing="0" styleClass="dataTable" headerClass="dataTableHeader" rendered="#{contactInfoForm.hasContactInfo}">
              <h:column>
                <f:facet name="header">
                   <h:outputText value="#{msgs['persons.person.contactInfo.list.header.contactInfoId']}"/>
                </f:facet>
                <htm:center><h:outputText value="#{contactInfo.contactInfoId}" styleClass="dataTableContent"/></htm:center>
              </h:column>
              <h:column>
                <f:facet name="header">
                   <h:outputText value="#{msgs['persons.person.contactInfo.list.header.description']}"/>
                </f:facet>
                <h:outputText value="#{contactInfo.description}" styleClass="dataTableContent"/>
              </h:column>
              <h:column>
                <f:facet name="header"></f:facet>
                <htm:center>
                   <h:commandLink styleClass="commandLink1" action="/persons/contactInfo/viewContactInfo" actionListener="#{contactInfoForm.populate}">
                      <f:param name="firstName" value="#{param.firstName}"/>
                      <f:param name="lastName" value="#{param.lastName}"/>
                      <f:param name="contactInfoId" value="#{contactInfo.contactInfoId}"/>
                      <h:outputText value="#{msgs['command.view']}"/>
                   </h:commandLink>
                </htm:center>
              </h:column>
              <h:column>
                <f:facet name="header"></f:facet>
                <htm:center>
                   <h:commandLink styleClass="commandLink1" action="/persons/contactInfo/editContactInfo" actionListener="#{contactInfoForm.populate}">
                      <f:param name="firstName" value="#{param.firstName}"/>
                      <f:param name="lastName" value="#{param.lastName}"/>
                      <f:param name="contactInfoId" value="#{contactInfo.contactInfoId}"/>
                      <h:outputText value="#{msgs['command.edit']}"/>
                   </h:commandLink>
                </htm:center>
              </h:column>
           </h:dataTable>
           <h:outputText value="#{msgs['persons.person.contactInfo.list.noRecords']}" styleClass="copy2" rendered="#{not contactInfoForm.hasContactInfo}"/>
        </h:form>
        </htm:div>
      </f:subview>
    </jsp:root>

  • R & R: "not a correct disc" during install

    Hi, I did a backup by R & R, it made two DVDs. One called "startup disc" and the second called "product recovery". Everything went great, and the R & R said that I cannot do another copy - I know, thats right. I have formated the HDD, and I tried to do the recovery. I started with "startup disc", the interface has loaded, I chose something like back to factory state, good. The computer restarted, and ask me to put "product recovery" disc. I did, but it said that "this is not the correct disc". So now, I am hopeless. I have formated the HDD on a low-level, and need to recover the factory state. I browse the "product recovery" DVD, it contains folder called "Recovery" full of AOD, CRI, IMZ and FDD files. It is not scratched or something, and I did everything via Lenovo ThinkVantage software. The system is XP, if it is important, T60. Can anybody help, please?
    Lenovo W520 | 15.6" HD+ | Intel i7 2720QM | 16 GB DDR3 | nVidia Quadro 1000M | Intel 510 SSD | Hitachi 7200rpm HDD | Lenovo Mini Dock 3 Plus

    In your postion, I think I would do two things in the following order; contact Lenovo service to order original recovery disks, and then the copy the created recovery dvd in the hope it's just a bad disc.
    @James, I agree, I thought that as well, but it seems to be working OK ??
    Message Edited by andyP on 07-18-2008 02:59 PM
    Andy  ______________________________________
    Please remember to come back and mark the post that you feel solved your question as the solution, it earns the member + points
    Did you find a post helpfull? You can thank the member by clicking on the star to the left awarding them Kudos Please add your type, model number and OS to your signature, it helps to help you. Forum Search Option T430 2347-G7U W8 x64, Yoga 10 HD+, Tablet 1838-2BG, T61p 6460-67G W7 x64, T43p 2668-G2G XP, T23 2647-9LG XP, plus a few more. FYI Unsolicited Personal Messages will be ignored.
      Deutsche Community     Comunidad en Español    English Community Русскоязычное Сообщество
    PepperonI blog 

  • Software for communicating with ipod not installed correctly?

    I cant download the new itunes 11.0.1 as keeps coming up with invalid or corrupt signature. So downloaded it onto another laptop and then copied it over. When opening it comes up with the following message "the software required for communicating with ipods and mobile phones was not installed correctly, it asked if you want itunes to repair it and when you say yes it doesnt repair.  Tells me to re-install itunes which i cant do. Any ideas?

    Another thing is that iPod Touch shows up fine...I've tried every other ipod from older 4gig Nanos to 120gb Classics and none of them work..this is really annoying!

  • Why actionlistener not fired?

    Dear All,
    I have two tables with different data bindings, rendering output in one column as comnadLink component
    On both tables comnadLink components has actionlistener binded to one method on backing bean.
    For some reason actionListener is not firing for one of the tables. It does not metter which compannent I will use for rendering (table or tree) actionListener never fires when this particualr binding is used.
    What could be the reson?

    Hi Again,
    Below is page definition and actual page source.
    Workflow is following:
    1. There is page showResult to render some report outcome
    2. Page definition has one invokeMethod which accepts parameter resultId and calls remote EJB
    3. During workflow resultId is stored by another backing bean in requestScope #{requestScope.resultId} and call forwarded into showResult page
    4. Outcome rendered correct by showResult page. Part of the outcome is comandLink component within iterator (or table)
    5. Clicking on comandLnk should result in calling method on backing bean but it is not happen. Method is not called.
    6. Any other comandLink components out of iterator work correctly.
    I tried to use table and ADF component instead of trinidad, but result is the same.
    If I replace #{requestScope.resultId} by hardcoded value in page definition , then commandLink works
    <pageDefinition xmlns="http://xmlns.oracle.com/adfm/uimodel" version="11.1.1.56.60" id="showResultPageDef"
                    Package="client.pageDefs">
      <executables>
        <variableIterator id="variables" Refresh="always"/>
        <methodIterator Binds="getResultBytId.result" DataControl="ResultEJB" RangeSize="200"
                        BeanClass="model.entity.Result"
                        id="getResultByIdIterator" Refresh="always" CheckParams="true"/>
      </executables>
      <bindings>
        <methodAction id="getResultById" Action="invokeMethod"
                      MethodName="getResultById" DataControl="ResultEJB"
                      InstanceName="ResultEJB.dataProvider"
                      ReturnName="ResultEJB.methodResults.getResultById_ResultEJB_dataProvider_getResultById_result">
          <NamedData NDName="resultId" NDValue="#{requestScope.resultId}"
                     NDType="java.lang.Object"/>
        </methodAction>
        <tree IterBinding="getResultByIdIterator" id="Result" ChangeEventPolicy="none">
          <nodeDefinition DefName="model.entity.Result" Name="Result0">
            <AttrNames>
              <Item Value="description"/>
              <Item Value="header"/>
              <Item Value="value"/>
            </AttrNames>
            <Accessors>
              <Item Value="resultDetails"/>
            </Accessors>
          </nodeDefinition>
          <nodeDefinition DefName="model.entity.ResultDetails" Name="Result1">
            <AttrNames>
              <Item Value="description"/>
              <Item Value="nextParams"/>
              <Item Value="nextStep"/>
              <Item Value="value"/>
            </AttrNames>
          </nodeDefinition>
        </tree>
      </bindings>
    </pageDefinition>Page:
    <tr:iterator var="h" rows="0" first="0" value="#{bindings.Result.collectionModel}" id="hiter">
    <tr:commandLink text="#{h.value}" id="cl1"
                                            actionListener="#{backing_showResult.proceedDrillDown}" immediate="true"/>
    </tr:iterator>Any suggestions?
    Thank you.

  • End-of-central-directory signature not found

    I am in the process of configuring Grid on a Linux server (OEL 5)
    i have the software onn the server as a zip file and i downloaded it through ftp in binary mode.
    I am not able to extract it,below si the error..
    [root@oemgridsvr Grid]#
    [root@oemgridsvr Grid]# unzip GridControl_10.2.0.4_LINUX.zip
    Archive: GridControl_10.2.0.4_LINUX.zip
    End-of-central-directory signature not found. Either this file is not
    a zipfile, or it constitutes one disk of a multi-part archive. In the
    latter case the central directory and zipfile comment will be found on
    the last disk(s) of this archive.
    note: GridControl_10.2.0.4_LINUX.zip may be a plain executable, not an archive
    unzip: cannot find zipfile directory in one of GridControl_10.2.0.4_LINUX.zip or
    GridControl_10.2.0.4_LINUX.zip.zip, and cannot find GridControl_10.2.0.4_LINUX.zip.ZIP, period.
    [root@oemgridsvr Grid]#
    [root@oemgridsvr Grid]#
    [root@oemgridsvr Grid]#
    [root@oemgridsvr Grid]# file GridControl_10.2.0.4_LINUX.zip
    GridControl_10.2.0.4_LINUX.zip: Zip archive data, at least v1.0 to extract
    [root@oemgridsvr Grid]#
    [root@oemgridsvr Grid]#
    Please help !!
    ~Thanks

    I think this is multi-part archive file. Basically, you have to put these files in one big file and unzip that file..
    E.g you must have at least 2 zip files with ext a and b.. EG. for AIX platform there are 2 zip files in the downld zip files.
    Step 1: cat p4547817_10202_AIX64-5L.zip.a p4547817_10202_AIX64-5L.zip.b > p4547817_10202_AIX64-5L.zip
    Step 2: Make sure the checksum is correct as per the file howto.txt.
    $ > /usr/bin/cksum p4547817_10202_AIX64-5L.zip
    should produce output 3252003388 1319974395 p4547817_10202_AIX64-5L.zip
    Step 3: unzip p4547817_10202_AIX64-5L.zip

  • Workflow Requested End not firing

    Hi
    I have a problem with a workflow that has a task with the Requested End tab defined with an outcom. The workflow supposed to send a notification after it reaches the Date defined in the Requested End Tab. The Requested End date is reached but the step defined after the autome of the latest end (Notification should be sent) is not firing.
    The workflow log shows the value in the fields used for the expression for the Latest End as correct, and when I drill into the task it shows the correct End Date under the Work Item Attributes list.
    I inherited this workflow from a previous developer on my project and I need to debug it and figure out what is wrong.
    Can anyone please help?
    Thanks
    Elona Buchman

    Thank you Srinivas
    This was the problem. I realized it after I posted the message. I went to SWU3 and the schedule backgroung job for the deadlines was not active.
    Regards
    Elona

  • Sorting not working correctly for date field in alv report

    Hi All,
    My report displays many rows also containing date type fields of bldat,budat .
    When I sort the report selecting field of type bldat budat the sorting is not correct for the year.
    Ex:
    Invoice doc dat
    01-25-2011
    01-21-2011
    02-02-2011
    10-25-2010
    11-20-2010
    If I use ascending then it is sorted as :
    Invoice doc dat
    01-21-2011
    01-25-2011
    02-02-2011
    10-20-2010
    10-25-2010
    Why the sorting is not working correct for year.(2010 records should have been first).
    The field wa_tab-bldat is of type char10.
    It is populated as wa_tab-bldat = bsak-bldat.
    Kindly suggest what can be done.

    The field wa_tab-bldat is of type char10
    Then what it does is correct.
    Refer to type datum...it will work

  • 10g exporting to CSV using client_text_io is not working correctly.

    I have an odd issue which i could do with some help with. I run an function that exports to CSV based on an pre defined record group.
    This has been working fine for many months with various customers. Recently a new customer used it and they have 28k rows in his record group and the export is actually not exporting correctly.
    The record group has a record count of 28331.
    The CSV produced has only 3756 in my CSV file. These are the last 3756 records in the Record group so its as if its overwriting the data as it goes yet all smaller datasets work
    FUNCTION fun_export_csv (vgraphid NUMBER, p_filename VARCHAR2)RETURN BOOLEAN IS
      out_file                      client_text_io.file_type; 
         i                                             NUMBER;
      lv_line              VARCHAR2(5000);
    BEGIN
    rg:=populate_group('RG11_EXP');               
    synchronize;
    lv_line:= ('"GIN","Gin Date","PO Num","PO Required Date","Mat Num","Mat Description","Supplier Part No","On Time Delivery(Yes-1, No-0)"');
    client_text_io.put(out_file, lv_line);
    client_text_io.new_line(out_file,1); 
    For i in 1..get_group_row_count('RG11_EXP') Loop--this count is 28331
    lv_line:= ('"'||get_group_number_cell('RG11_EXP.col1', i )                 ||'"'|| ',' ||'"'||
         get_group_date_cell('RG11_EXP.grn_date', i )                 ||'"'|| ',' ||'"'||                                          
         get_group_number_cell('RG11_EXP.po', i )       ||'"'|| ',' ||'"'||
         get_group_date_cell('RG11_EXP.daterqd', i ) ||'"'|| ',' ||'"'||
         get_group_char_cell('RG11_EXP.item_no', i ) ||'"'|| ',' ||'"'||
         get_group_char_cell('RG11_EXP.desc', i )                    ||'"'|| ',' ||'"'||
         get_group_char_cell('RG11_EXP.part_no', i )               ||'"'|| ',' ||'"'||
         get_group_number_cell('RG11_EXP.ontime', i )                    ||'"');
    client_text_io.put(out_file, lv_line);
    client_text_io.new_line(out_file,1); 
    END LOOP;     
    client_text_io.FCLOSE(out_file);
    RETURN TRUE;          

    Hello,
    Try to insert a "synchronize" instruction from time to time:
    i  pls_integer := 1;
    Loop
      If mod(i, 500) = 0 Then
         synchronize;
      End if ;
      i := i + 1 ;
    End loop;
    ...<p>But keep in mind the the CLIENT_TEXT_IO generate a lot of network traffic, so it is better and faster to generate the file on the A.S., then after transfer it to the client machine.</p>
    Francois

  • Microsoft Outlook 2010 The delegates settings were not saved correctly. Cannot activate Send-on-behalf-of list. You do not have sufficient permission to perform this operation on this object.

    I am trying to assign delegation to a user and I receive the following message.
    The delegates settings were not saved correctly.  Cannot activate Send-on-behalf-of list.  You do not have sufficient permission to perform this operation on this object.
    We are using 2010 for the server and client.  There are only specific mailboxes that this is happening for after being migrated from Lotus Notes.  The user can use their mailfile fine however it is just the delegation that appears corrupted somehow. 
    I'm not sure how to fix this.  I have checked the access through the security tab in ad and that looks fine.
    Any help would be appreciated.

    I did some more digging and I solved it.
    This would be the solution:
    In Active Directory Users and Computers
    -Click on VIEW
    -Click on ADVANCE FEATURES  (this is important otherwise you won't see
    the complete list in the next steps)
    -Click on the USERS container
    -Find the problem user's account
    -Right mouse the account and click on PROPERTIES
    -Click on the SECURITY tab
    -In the top box, click on the SELF account
    -In the bottom portion of the screen make sure the READ PERSONAL
    INFORMATION  & WRITE PERSONAL INFORMATION  should both be checked for
    ALLOW
    If you can compare the permissions for 'SELF' with another user you probably should set them accordingly to be safe. I noticed that for the user where setting delegates (SOB) did
    not work, more than those 2 permissions were missing.
    Good luck!
    David

Maybe you are looking for