Date: Thu, 30 Nov 2000 19:47:54 -0500 (EST) From: Adam <bsdx@looksharp.net> To: Melon <melon@orangenetwork.net> Cc: freebsd-security@FreeBSD.ORG Subject: Re: 137/udp Message-ID: <Pine.BSF.4.21.0011301946060.44881-100000@turtle.looksharp.net> In-Reply-To: <3A26A013136.BF8AMELON@postman.orangenetwork.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 1 Dec 2000, Melon wrote: >Hello, > >All network administrator may always see rejected 137/udp packet... > >I want to know how these udp packets are occured? >I expect some stupid kids attacked me. However, is there any exception? Windows likes to send Netbios name query packets to a host on port 137 with certain normal use operations, including dns lookups. Consider it normal activity if you have windows clients using resources on your computer, but abnormal if you see hits to port 137 to all of your ip's within a short timerange. Also, if you are not running samba, you have no reason to worry about incoming netbios packets. > >Someone sent only 3 137/udp packets to specific IP address. In general, >these stupid does not sent to specific IP address, sent to all IP >addresses I have. > >Any suggestions appreciated. > >- Melon > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0011301946060.44881-100000>