Firewall Wizards mailing list archives

Re: RE: Help w/ Port 137 Traffic


From: Richard Sharpe <rsharpe () ns aus com>
Date: Tue, 15 Oct 2002 06:21:25 +0930 (CST)

On Mon, 14 Oct 2002, Mikael Olsson wrote:


Mikael Olsson wrote:
They're not even remotely related.
[...]
(Of course, the protocol structs differs entirely too; this is
just the most obvious way of showing the difference.)


Richard Sharpe wrote:

Hmmm, I don't want to make a lot of game-show like noises, but there are
similarities between DNS requests and NetBIOS name requests, however, the
RFC1001/RFC1002 people did choose a really weird encoding for names.

*cough* did I really write that?  Yes, the basic DNS protocol structs 
are the same.  I think I meant to say that the resource record (type)
structs differ entirely or something like that.  Or maybe my brain 
just short circuited (which would explain why I wrote 'not even
remotely' related.)  

Anyway, the point is that (as far as I know) you can't use normal
DNS tools to exchange netbios RRs.  ( ... right? :) )

I agree.

Regards
-----
Richard Sharpe, rsharpe () ns aus com, rsharpe () samba org, 
sharpe () ethereal com, http://www.richardsharpe.com

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards


Current thread: