UDP port 137 Question

Bryce Ryan brycer at organic.com
Tue Jan 6 19:36:41 UTC 1998

My mailer says that Melody Yoon said:
> Hi Jon. If memory serves, Netbios nameservices are generally only on the
> same segment unless you have an NT/Samba server somewhere... As it is, it
> should *NOT* be directed at your Unix boxes and definately not coming
> across the Internet. My guess is that someone may be attempting a bad OOB
> data attack on port 137 thinking that your Unix box is some type of PC.

who was it that said, "never attribute to malice what can be explained by

we run a web farm and see requests directed at port 137 all the time on
the web sites we host.  i don't know for certain, but i assume it is 
some sort of internet explorer "feature" that is attempting to establish
a CIFS connection to the web site.  we ignore them anyway. 

=== bryce ryan ============ organic  ======== brycer at organic.com =========
==== director =========== information ===== http://www.organic.com/ ======
== /etc/networks ========== services === v:415.278.5652#f:415.284.6891 ===   

More information about the NANOG mailing list