Re: What are these, please?
From: NeoSadist (neosad1st_at_charter.net)
Date: 09/13/04
- Next message: qoretek: "Firebox- I wish to stop it from reading attachments"
- Previous message: MC: "Re: Zyxel ZyWall 10 router MADNESS"
- In reply to: Rolleston: "What are these, please?"
- Next in thread: Rolleston: "Re: What are these, please?"
- Reply: Rolleston: "Re: What are these, please?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 13 Sep 2004 14:39:13 -0600
Rolleston wrote:
> I've noticed a number of outgoing packets blocked by Kerio 2.1.5.
>
> They are all sent to IP address 255.255.255.255, ports 137 & 138.
>
> Can anyone tell me what they are please?
>
> I've read a few words on NetBIOS, but I'm not sure what would
> send these packets, or what they would be likely to contain.
>
> I've captured some of them and can provide details if necessary.
>
> My OS is Windows XP SP2.
>
> Any help much appreciated,
>
> Thanks.
>
> R.
That's Windows. It's a common thing to see, and it's due to you trying to
share files over your LAN. It could be a spoof, but I doubt it.
By the way, 127.0.0.1 is loopback, meaning it comes from and goes to your
own computer. If you see those, those are rarely (if ever) an attack.
NetBIOS is Windows file sharing, and trust me: Windows machines are very
"noisy" on the LAN.
-- BOFH Excuse #99: SIMM crosstalk.
- Next message: qoretek: "Firebox- I wish to stop it from reading attachments"
- Previous message: MC: "Re: Zyxel ZyWall 10 router MADNESS"
- In reply to: Rolleston: "What are these, please?"
- Next in thread: Rolleston: "Re: What are these, please?"
- Reply: Rolleston: "Re: What are these, please?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
