Can anyone describe this alert please?
I am confused if an attack is run against my network or not.
I run snort IDS/IPS through a pfsense firewall.
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
It is most probably a false positive like mentioned here https://community.spiceworks.com/topic/1514894-snort-attempted-command-buffer-overflow-smtp
you should provide more details such as is the traffic originating interally or any other logs you have.