Re: a lot of netbios traffic?
From: Felmon John Davis (nemo@nowhere.edu)Date: 01/02/02
- Next message: Felmon John Davis: "Re: a lot of netbios traffic?"
- Previous message: Kasper Dupont: "Re: How to allow Pcanywhere client to go through iptables firewall"
- In reply to: Daniel Polombo: "Re: a lot of netbios traffic?"
- Next in thread: Tim Haynes: "Re: a lot of netbios traffic?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Felmon John Davis" <nemo@nowhere.edu> Date: Wed, 02 Jan 2002 20:49:42 GMT
In article <slrna35tsu.v5.polombo@ambre.intranet.cartel-info.fr>, "Daniel
Polombo" <polombo@cartel-info.fr> wrote:
> Yan Seiner s'est fendu de cette remarque :
>> NetBEUI is incredibly noisy. Every 10 minutes or so every win box
>> broadcasts its information to the network. Then there are the WINS
>> elections, to be held at some frequent interval.
> This is NetBios (presumably over IP), not NetBEUI. Also, there are no
> WINS elections that I am aware of, only master browser elections (which
> are completely independant from WINS).
>> If you have a lot of win boxes, and they have TCP/IP installed, that
>> adds up to a lot of useless traffic.
>> Nothing you can do about it. Forget it. Block ports 135, 137-139,
>> both TCP and UDP, and go on your way.
> IIRC, 135 is used by Microsoft RPC services, and might be used by other
> stuff than NetBios.
> The fact that heavy network-ns and network-dg traffic is spotted may
> simply mean that there is a lot of file-sharing going on (through
> windows' native resource sharing system, SMB, which sits on top of
> NetBios).
> Oh, btw ... what does this have to do with linux?
sorry: I use linux and thought this was a security issue.
thanks for the info though.
Felmon
- Next message: Felmon John Davis: "Re: a lot of netbios traffic?"
- Previous message: Kasper Dupont: "Re: How to allow Pcanywhere client to go through iptables firewall"
- In reply to: Daniel Polombo: "Re: a lot of netbios traffic?"
- Next in thread: Tim Haynes: "Re: a lot of netbios traffic?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|