Mailinglist Archive: opensuse (3103 mails)
| < Previous | Next > |
Re: [SLE] Firewall Log Interpretation Requested
- From: "Joe Morris (NTM)" <Joe_Morris@xxxxxxx>
- Date: Wed, 12 Feb 2003 12:59:24 +0800
- Message-id: <3E49D4AC.2050704@xxxxxxx>
On 02/12/2003 11:10 AM, L. Mark Stone wrote:
destination is a broadcast, 192.168.0.255
protocol is udp
source port is 137
destination port is 137
conclusion, a netbios name server broadcast packet. I would conclude you are running samba, which is trying to register with the netbios name server of a Windows network. HTH
--
Joe Morris
New Tribes Mission
Email Address: Joe_Morris@xxxxxxx
Web Address: http://www.mydestiny.net/~joe_morris
Registered Linux user 231871
God said, I AM that I AM. I say, by the grace of
God, I am what I am.
FYI the Linux box is connected to a D-Link DI-704P DSL router performingsource is your linux box, 192.168.0.247
DHCP. The D-Link device always assigns the IP address of 192.168.0.247
to the Linux box.
Feb 11 21:58:52 bronxville kernel: SuSE-FW-DROP-ANTI-SPOOFING IN=eth0
OUT= MAC= SRC=192.168.0.247 DST=192.168.0.255 LEN=96 TOS=0x00 PREC=0x00
TTL=64 ID=5 DF PROTO=UDP SPT=137 DPT=137 LEN=76
destination is a broadcast, 192.168.0.255
protocol is udp
source port is 137
destination port is 137
conclusion, a netbios name server broadcast packet. I would conclude you are running samba, which is trying to register with the netbios name server of a Windows network. HTH
--
Joe Morris
New Tribes Mission
Email Address: Joe_Morris@xxxxxxx
Web Address: http://www.mydestiny.net/~joe_morris
Registered Linux user 231871
God said, I AM that I AM. I say, by the grace of
God, I am what I am.
| < Previous | Next > |