Date: Tue, 5 Sep 2000 00:08:38 +0200 (CEST) From: Janko van Roosmalen <janko@compuserve.com> To: "Crist J . Clark" <cjclark@reflexnet.net> Cc: Greg Lehey <grog@lemis.com>, FreeBSD Questions <questions@FreeBSD.ORG>, groggy@iname.com Subject: Re: signature? Message-ID: <Pine.BSF.4.10.10009050003250.1576-100000@parmenides.utp.net> In-Reply-To: <20000903155613.O62475@149.211.6.64.reflexcom.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 3 Sep 2000, Crist J . Clark wrote: > > On Sun, Sep 03, 2000 at 10:26:18PM +0200, Janko van Roosmalen wrote: > > The "netbios-ns" makes me think of a Windows 95/98/NT station or a > > Samba server. > > > > Checking "/etc/services" however points to a bootp client. > > > > bootpc 68/tcp # BOOTP client > > bootpc 68/udp > > Uhh, but where do you see any traffic on this port? [snip] > > > > 05:13:25.668925 groggy.45057 > 208.151.115.193.netbios-ns: udp 68 > > > > 05:13:25.668957 groggy.45057 > 208.151.115.193.netbios-ns: udp 68 > > > > 05:13:25.699102 groggy.netbios-ns > 208.151.115.193.netbios-ns: udp 68 > > > > 05:13:25.699133 groggy.netbios-ns > 208.151.115.193.netbios-ns: udp 68 > > > > 05:13:25.808811 groggy.46773 > 208.151.115.193.netbios-ns: udp 68 > > > > <snip> > > I see 'netbios-ns' (137), 51488, 46346, 32996, 45057, and 46773 ports > and every single one is sent to port 137. Are you talking about that > trailing 68, the packet size? Crist, Yes, you are right. I was too focussed on the trailing 68. But at least I know how to spell your name ;) Janko To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.10009050003250.1576-100000>