Synopsis
The remote client is running the MODBUS protocol.
Description
The remote client is running the MODBUS protocol. This protocol is common on SCADA or process control networks. NNM has just observed a Modbus 'Clear Counters and Diagnostic Registers' request. This sort of request, if fulfilled, allows remote attacks to clear audit data which the server may use to track unauthorized traffic.
