[Dshield] new to logging - question
chris.meidinger at badenit.de
Thu Apr 29 15:53:37 GMT 2004
Depending on what you are doing, windows often tried to talk to machines
with netbios when there is a connection of another protocol. Exchange, for
example, tries to talk netbios with machines that connect to the smtp
If you don't need netbios, you can shut it off in the properties page of
TCP/IP of the network adapter.
Any more questions, feel free to ask,
> -----Original Message-----
> From: list-bounces at lists.dshield.org
> [mailto:list-bounces at lists.dshield.org] On Behalf Of Strobel, Brenda
> Sent: Thursday, April 29, 2004 2:52 PM
> To: 'General DShield Discussion List'
> Subject: [Dshield] new to logging - question
> I just started submitting my zonealarm logs to dsshield.
> I've noticed a TON of events going out from MY machine to
> various ip addresses to port 137.
> I've scanned my machine left and right and it finds nothing.
> Any thoughts?
> Privileged/Confidential Information may be contained in this
> message. If you are not the addressee indicated in this
> message (or responsible for delivery of the message to such
> person), you may not copy or deliver this message to anyone.
> In such case, you should destroy this message and kindly
> notify the sender by reply email. Please advise immediately
> if you or your employer do not consent to Internet email for
> messages of this kind. Opinions, conclusions and other
> information in this message that do not relate to the
> official business of my firm shall be understood as neither
> given nor endorsed by it.
> list mailing list
> list at lists.dshield.org
> To change your subscription options (or unsubscribe), see:
More information about the list