port 139 scanning

[Sumit Siddharth <Sumit.Siddharth () eurecom fr>]

Hi ,
I have found this traffic on my firewall.
I see the Ip 61.111.36.34 connected to my honeyd at port 139 (SMB ,NBBS 
and Tcp).this ip is connected for more than an hour to the same port and 
it make various quieries like :-

Negotiate protocol request[ short frame]
Session setup andx request
Session Request ,to *SMBSERVER <20>

Wat kind of tool is it?
Also as i am a newbie kindly forgive me if I have missed out anything 
really important to mention.
waiting for a quick response
Thanks
Sumit