Security Basics mailing list archives

Re: Listener on ports 137, 138, 139

From: Devdas Bhagat <dodobh () nettaxi com>
Date: Thu, 17 Oct 2002 12:08:12 +0530

On 15/10/02 19:27 +0200, Rune Berntzen wrote:

When checking port activity using TCPView I notice that I have a =
listener on ports 137,138 and 139.

SMB. You have Netbeui installed and wworking over TCP.

The Local Address seems  to be from a Class B network, 169.254.0.0, =
which I trace to something called=20

169.254/16 is the block to be used by a network interface when it cannot
contact its dhcp server.
<snip>

Anybody has an idea about what this can be.

You have File and Print sharing enabled.

Devdas Bhagat