Snort mailing list archives
netbios-name-query
From: "Robert L. Yelvington" <robert () sciresearch com>
Date: Fri, 08 Jun 2001 10:54:18 -0700
I run snort 1.7 w/vision.conf from whitehats.com on fBSD 4.3 machine, runs like a champ w/no probs! I have recently, say within the last month, noticed an unusual amount of 'netbios-name-query' (port 137) scans on my machine...at least 4/5 a day. Should I be worried about this? The scans are rarely across more than a couple of IPs in my /26 address space and mostly originate from some dsl or cable provider's network. Has anyone else noticed this? OR can someone provide comments? thanx, ~rob _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- netbios-name-query Robert L. Yelvington (Jun 08)
- <Possible follow-ups>
- Re: netbios-name-query Matthew Collins (Jun 11)
- Re: netbios-name-query Rimantas Mocevicius (Jun 11)
- RE: netbios-name-query Graeme Fowler (Jun 11)