This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Should I be worried? Severity="info" NBNS

So I have tons of these packets logged.

The machine is trying to connect through a NIC that is local only (no gateway) to port 137 on external IP addresses. I will contact the software manufacturer, but what is the threat of these packets?

Does the fact that the Astaro (v7.505) states severity="info" mean that this is just making me aware? If this was a threat would the severity value change?

Thanks!
-Nator

This thread was automatically locked due to age.

Parents

0 BarryG over 14 years ago

Hi, port 137 is one of the 3 MicroSoft NetBios ports, used for filesharing, etc., between Windows computers.

Perhaps that computer is trying to mount a remote network share?

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BarryG over 14 years ago

Hi, port 137 is one of the 3 MicroSoft NetBios ports, used for filesharing, etc., between Windows computers.

Perhaps that computer is trying to mount a remote network share?

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Astaronator over 14 years ago in reply to BarryG

Actually you are right Barry, the computer is constantly accessing a mapped drive on 192.168.1.2

But the drive is mapped, set to remember the credentials and never disconnects. And it's still sending these packets...
Cancel
Vote Up 0 Vote Down

Cancel