Security Incidents mailing list archives

Re: netbios scanning coming from IANA's internal class B...?


From: Oliver Hensel <oliver.hensel () telematis de>
Date: Mon, 25 Jun 2001 21:45:01 +0200

Hi.

Homer Simpson wrote:

Hi.

That network is, ideed, reserved address space.  You will find that
Microsoft machines that are booting up and looking for their DHCP server
(but unable to find it) will be given an IP address on this network.  This
behaviour is exhibited in Win98, but not in Win95 or NT (and I doubt it
happens in Win2K).
--- snip stuff about perceived NetBIOS scan ---

Yes W2K does this also. It's documented behavior and shouldn't interfere
with anything on the Internet, if only the ISPs would do their egress
filtering, sigh.

Greetings
olli


-- 
Oliver Hensel
telematis Netzwerke GmbH
mailto:    oliver.hensel () telematis de
           Siemensstrasse 23, D-76275 Ettlingen
           Tel: +49 (0) 7243/5050-557, Fax: 5050-592
visit us:  http://telematis.com

This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see:

http://aris.securityfocus.com


Current thread: