this attack is still strong here..

[Alex Rubenstein <alex () nac net>]

jamesc () gbr1 oct> show firewall filter proactive-filter
Name                                            Bytes                   Packets
mssql-drops                                     916252204              2267951





        term NO-MSSQL {
            from {
                packet-length 404;
                protocol udp;
                destination-port 1434;
            }
            then {
                count mssql-drops;
                discard;
            }
        }