Security Basics mailing list archives

RE: source LAN port 137 dest 169.x


From: "David Gillett" <gillettdavid () fhda edu>
Date: Thu, 31 Jul 2003 09:16:33 -0700

The horse's mouth:

http://www.iana.org/assignments/port-numbers


-----Original Message-----
From: stephen at unix dot za dot net [mailto:stephen () unix za net]
Sent: July 30, 2003 23:54
To: Jason Armstrong
Cc: 'security-basics () securityfocus com '
Subject: RE: source LAN port 137 dest 169.x



cat /etc/services |grep <port number here>

:)


On Tue, 29 Jul 2003, Jason Armstrong wrote:

Also, check out this great site:

http://www.networksorcery.com/enp/protocol/ip/ports00000.htm

It has a listing of all of the well-known ports.

Port 137 is NETBIOS.

Jason



-----Original Message-----
From: Kurt
To: security-basics () securityfocus com
Sent: 7/29/03 6:28 PM
Subject: RE: source LAN port 137 dest 169.x

The only thing that I'm familiar with that the 169.x.x.x 
range is used
for is the auto-config in MSFT machines that can't get a 
DHCP-assigned
address.

| -----Original Message-----
| From: Darren Gragg [mailto:admin () bsbks com]
| Sent: Tuesday, July 29, 2003 08:33
| To: security-basics () securityfocus com
| Subject: source LAN port 137 dest 169.x
|
|
| I am seeing some UDP packets showing up in my logs as being
| dropped that
| have a source of 172 my local subnet with a port of 137 and a
| destination of
| a 169.xxx.xxx.xxx address with a port of 137.  what would
| that destination
| be telling me?  Any ideas?  Thanks very much in advance
|
| Darren Gragg
| Network Administrator
|
|



--------------------------------------------------------------
----------
---

--------------------------------------------------------------
----------
----


--------------------------------------------------------------
-------------

--------------------------------------------------------------
--------------



--------------------------------------------------------------
-------------
--------------------------------------------------------------
--------------


---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: