Security Incidents mailing list archives
Re: Strange Traffic to ports 139 and 137 from a machine with no data
From: "Stephen J. Smoogen" <smooge () gmail com>
Date: Thu, 2 Mar 2006 07:49:48 -0700
On 3/2/06, LE Backup <lucretias () shaw ca> wrote:
Sorry for the oversimplification, but are you saying this is normal?
To clarify.. I do not know if it is normal or not. I do know that it occured on a very small percentage (less than 0.5%) of "clean" machines. I am primarily Linux based so I had to go off of the Windows guys looking at it. -- Stephen J Smoogen. CSIRT/Linux System Administrator
Current thread:
- Re: Strange Traffic to ports 139 and 137 from a machine with no data Joachim Schipper (Mar 01)
- <Possible follow-ups>
- Re: Strange Traffic to ports 139 and 137 from a machine with no data loki74 (Mar 01)
- Re: Strange Traffic to ports 139 and 137 from a machine with no data loki74 (Mar 01)
- Re: Strange Traffic to ports 139 and 137 from a machine with no data Stephen J. Smoogen (Mar 01)
- Message not available
- Re: Strange Traffic to ports 139 and 137 from a machine with no data Loki 74 (Mar 02)
- Re: Strange Traffic to ports 139 and 137 from a machine with no data Stephen J. Smoogen (Mar 02)
- Re: Strange Traffic to ports 139 and 137 from a machine with no data Stephen J. Smoogen (Mar 01)
- Message not available
- Re: Strange Traffic to ports 139 and 137 from a machine with no data Stephen J. Smoogen (Mar 02)