[plug] NT netbios-ns probes

[Leon Brooks]

Christian wrote:
> Sorry that this is a little off-topic but does anyone know why NT web
> servers appear to send out netbios-ns (port 137/udp) probes when you
> download web pages from them?

> Feb  7 16:52:28 machine kernel: Packet log: input DENY eth0 PROTO=17
> 1.2.3.4:137 5.6.7.8:137 L=78 S=0x00 I=32689 F=0x0000 T=115 (#34)
> Feb  7 16:52:29 machine kernel: Packet log: input DENY eth0 PROTO=17
> 1.2.3.4:137 5.6.7.8:137 L=78 S=0x00 I=33457 F=0x0000 T=115 (#34)

IANAWG but my first guess is that it is attempting to get user info from
you. Far be it from a MS based product to use identd...

-- 
Confidence is the feeling you have before you understand the situation.
If at first you don't succeed, try a shorter bungee. When in trouble,
when in doubt, run in circles, scream and shout. The two great secrets
of success are: don't tell anyone everything that you know.