Home page logo
/

nanog logo nanog mailing list archives

Re: UDP port 137 Question
From: Paul Thornton <prt () linx net>
Date: Wed, 7 Jan 1998 14:24:21 +0000 (GMT)


I noticed similar port 137 hits a while back, and after a bit of
investigating discovered that every time a colleague visited a web site
(using Netscape, incidentally) the server sent a port 137 request back to
the client PC.

Initially I thought this was a "helpful" MS extension in their server, but
have since seen port 137 hits from their nameservers as well.  This probably
points to some interesting name lookups going on at there end, which results
in a NetBIOS name lookup being sent back.  Somewhere I have the address of
the server in question - I'll dig it out if there is interest.  If nothing
else, their hit count will go up ;-)

Paul

--
Paul Thornton, Network Engineer, London Internet Exchange Ltd.
Tel: 07000 783797   Mobile: +44 467 372205



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault