nanog mailing list archives
Re: UDP port 137 Question
From: Dalvenjah FoxFire <dalvenjah () dal net>
Date: Tue, 6 Jan 1998 10:52:43 -0800 (PST)
C. Jon Larsen put this into my mailbox:
Is there any *valid* reason to see UDP traffic directed at a unix box's port 137 coming from IP sources across the internet ? The unix servers in question are most definitely *not* running samba, and there is absolutely no NT anywhere on this customer's network (that is seeing the incoming UDP traffic directed at an IP destination address on port 137). (A couple of 95 boxes scattered across an Ethernet comprise the Micro$oft part of the network). None of the 95 boxen are running any file or print serving (sharing) resources. I can't think of any valid reason to see this traffic, personally. Anybody out there that can present a scenario where I would expect to see these UDP packets coming back in ?
No. Doubtless some idiot thinks everybody runs WinDoze and is trying to winnuke you, especially if several boxes get hit one after the other. E-mail the contacts of the source address and ask that the account be removed; chances are the person wasn't clueful enough to spoof the source address. -dalvenjah -- Dalvenjah FoxFire (aka Sven Nielsen) "Hath not a dude eyes? If you prick us, Founder, the DALnet IRC Network do we not get bummed? If we eat bad guacamole, do we not blow chunks?" e-mail: dalvenjah () dal net - Keanu Reeves as Shylock in The Critic whois: SN90 WWW: http://www.dal.net/~dalvenjah/
Current thread:
- UDP port 137 Question C. Jon Larsen (Jan 06)
- Re: UDP port 137 Question Dalvenjah FoxFire (Jan 06)
- Re: UDP port 137 Question Eric Germann (Jan 06)
- Re: UDP port 137 Question C. Jon Larsen (Jan 06)
- Re: UDP port 137 Question Eric Germann (Jan 06)
- Re: UDP port 137 Question Charles Sprickman (Jan 06)
- Re: UDP port 137 Question Steve Carter (Jan 06)
- Re: UDP port 137 Question Melody Yoon (Jan 06)
- Re: UDP port 137 Question Bryce Ryan (Jan 06)
- Re: UDP port 137 Question Melody Yoon (Jan 06)
- Re: UDP port 137 Question Rick H. Wesson (Jan 06)
- Re: UDP port 137 Question DAVE NORDLUND (Jan 08)
- Re: UDP port 137 Question James Stephens (Jan 06)
- Re: UDP port 137 Question Bryce Ryan (Jan 06)
- Re: UDP port 137 Question Dalvenjah FoxFire (Jan 06)