RE: source LAN port 137 dest 169.x

[stephen at unix dot za dot net <stephen () unix za net>]

cat /etc/services |grep <port number here>

:)


On Tue, 29 Jul 2003, Jason Armstrong wrote:

> Also, check out this great site:
>
> http://www.networksorcery.com/enp/protocol/ip/ports00000.htm
>
> It has a listing of all of the well-known ports.
>
> Port 137 is NETBIOS.
>
> Jason
>
>
>
> -----Original Message-----
> From: Kurt
> To: security-basics () securityfocus com
> Sent: 7/29/03 6:28 PM
> Subject: RE: source LAN port 137 dest 169.x
>
> The only thing that I'm familiar with that the 169.x.x.x range is used
> for is the auto-config in MSFT machines that can't get a DHCP-assigned
> address.
>
> | -----Original Message-----
> | From: Darren Gragg [mailto:admin () bsbks com]
> | Sent: Tuesday, July 29, 2003 08:33
> | To: security-basics () securityfocus com
> | Subject: source LAN port 137 dest 169.x
> |
> |
> | I am seeing some UDP packets showing up in my logs as being
> | dropped that
> | have a source of 172 my local subnet with a port of 137 and a
> | destination of
> | a 169.xxx.xxx.xxx address with a port of 137.  what would
> | that destination
> | be telling me?  Any ideas?  Thanks very much in advance
> |
> | Darren Gragg
> | Network Administrator
> |
> |
>
>
> ------------------------------------------------------------------------
> ---
> ------------------------------------------------------------------------
> ----
>
> ---------------------------------------------------------------------------
> ----------------------------------------------------------------------------


---------------------------------------------------------------------------
----------------------------------------------------------------------------