|
Guest
Posts: n/a
|
In article <bstv6o$lei$(E-Mail Removed)>,
(E-Mail Removed) says...
>
>
> J. Carson Mantooth wrote:
> > I just picked up a NG MR814 v2 the other day, and everything installed
> > fine. I've got most everything tweaked to my liking. For kicks, I
> > thought I'd turn on my firewall (VisNetic Firewall) to monitor the
> > packets coming in/out of my machine.
> >
> > Oddly enough, I'm getting NetBIOS requests to my machine from the
> > ROUTER! Check out this snippet of logs:
> >
> > 2003/12/30, 19:53:44.126, GMT -0500, 2010, Device 1, Blocked incoming
> > UDP packet (no matching rule), src=192.168.2.1, dst=192.168.2.19, sport=
> > 3569, dport=137
> > 2003/12/30, 19:53:46.009, GMT -0500, 2010, Device 1, Blocked incoming
> > UDP packet (no matching rule), src=192.168.2.1, dst=192.168.2.19, sport=
> > 3569, dport=137
> > 2003/12/30, 19:53:46.219, GMT -0500, 2010, Device 1, Blocked incoming
> > UDP packet (no matching rule), src=192.168.2.1, dst=192.168.2.19, sport=
> > 3571, dport=137
> > 2003/12/30, 19:53:47.461, GMT -0500, 2010, Device 1, Blocked incoming
> > UDP packet (no matching rule), src=192.168.2.1, dst=192.168.2.19, sport=
> > 3571, dport=137
> > 2003/12/30, 19:55:07.767, GMT -0500, 2010, Device 1, Blocked incoming
> > UDP packet (no matching rule), src=192.168.2.1, dst=192.168.2.19, sport=
> > 3573, dport=137
> > 2003/12/30, 19:55:09.339, GMT -0500, 2010, Device 1, Blocked incoming
> > UDP packet (no matching rule), src=192.168.2.1, dst=192.168.2.19, sport=
> > 3573, dport=137
> > 2003/12/30, 19:55:09.860, GMT -0500, 2010, Device 1, Blocked incoming
> > UDP packet (no matching rule), src=192.168.2.1, dst=192.168.2.19, sport=
> > 3574, dport=137
> > 2003/12/30, 19:55:11.953, GMT -0500, 2010, Device 1, Blocked incoming
> > UDP packet (no matching rule), src=192.168.2.1, dst=192.168.2.19, sport=
> > 3575, dport=137
> > 2003/12/30, 19:55:13.625, GMT -0500, 2010, Device 1, Blocked incoming
> > UDP packet (no matching rule), src=192.168.2.1, dst=192.168.2.19, sport=
> > 3575, dport=137
> >
> > Any ideas on why the router would be making NetBIOS requests to the
> > network? I wanted to check here before attempting to find out NetGear's
> > response as maybe someone else has experienced this.
> >
> > Regards,
> > Carson
>
> Netgear stuff sends out its NetBIOS name, so that Windows machines can
> access it not only as http://192.168.2.1 but also as
> http://netgear123456 (where 123456 is replaced by part of the
> MAC-address). So it is probably that. I just wonder why they send it
Thanks Nomen,
Although I also don't understand why it wouldn't broadcast on the
subnet, what you report makes sense. When I checked the router, it
seems to log which IPs on the network have active connections, so my
guess is rather than broadcasting, it only sends the packets P2P.
I double checked with an external probe on the WAN just to verify, so I
feel better now.
Happy new year,
Carson
|
|