[14559] in North American Network Operators' Group
Re: UDP port 137 Question
daemon@ATHENA.MIT.EDU (Paul Thornton)
Wed Jan 7 09:35:04 1998
Date: Wed, 7 Jan 1998 14:24:21 +0000 (GMT)
From: Paul Thornton <prt@linx.net>
To: "C. Jon Larsen" <jlarsen@ford.ajtech.com>
cc: nanog@merit.edu
I noticed similar port 137 hits a while back, and after a bit of
investigating discovered that every time a colleague visited a web site
(using Netscape, incidentally) the server sent a port 137 request back to
the client PC.
Initially I thought this was a "helpful" MS extension in their server, but
have since seen port 137 hits from their nameservers as well. This probably
points to some interesting name lookups going on at there end, which results
in a NetBIOS name lookup being sent back. Somewhere I have the address of
the server in question - I'll dig it out if there is interest. If nothing
else, their hit count will go up ;-)
Paul
--
Paul Thornton, Network Engineer, London Internet Exchange Ltd.
Tel: 07000 783797 Mobile: +44 467 372205
