Connection to port 137

[Marco Bizzarri <m.bizzarri () ICUBE IT>]

Hi all.

I'm seeing a lot of udp activity coming from internet ip on port 137 to
port 137 of our firewall. Is this normal, or I should start worring?

Here's a sample:

Nov 22 14:44:20 brontolo kernel: Packet log: ext-if DENY eth2 PROTO=17
y.y.y.y:137 x.x.x.x:137 L=78 S=0x00 I=10984 F=0x0000 T=120 (#21)

Any suggestion?

Bye
Marco

--
Marco Bizzarri - Responsabile Tecnico - Icube S.r.l.
Sede:   Via Ridolfi 15 - 56124 Pisa (PI), Italia
E-mail: m.bizzarri () icube it          WWW: www.icube.it       
Tel:    (+39) 050 97 02 07              Fax: (+39) 050 31 36 588