Notice that it says the attack came from your machine and went to his computer. Since it's unlikely that you'll be running SQL Server on the same box as JJ2, it's alomst certainly a false positive. You don't need to do anything about this - what probably happened is a update packet from JJ2 triggered that IDS signature by mistake.