Re: nbsession scans

[H C <keydet89 () yahoo com>]

Ray,

How is it weird?  Are you just seeing the SYN packets,
or are you recording the entire session via
snort/tcpdump/windump?

Have you contacted the owner or upstream?

Carv

--- Ray Beaulieu <ray () tiburonnet com> wrote:
> anyone else seeing NetBIOS session <TCP 139> scans
> from
> "somelonghostname.npg.ispchannel.com"?  I'm getting
> several a week and not
> my entire range is being scanned. . 
>
> wierd.
>
> -Ray
----------------------------------------------------------------------------
> This list is provided by the SecurityFocus ARIS
> analyzer service.
> For more information on this free incident handling,
> management 
> and tracking system please see:
> http://aris.securityfocus.com


__________________________________________________
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com