dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
1233
share rss forum feed


Cartel
Premium
join:2006-09-13
Chilliwack, BC
kudos:2
Reviews:
·TELUS
·Shaw
·TekSavvy DSL

Whats the deal with port 137?

Click for full size
Click for full size
Click for full size
Click for full size
I keep seeing port 137 from my routers default gateway IP every 30 minutes I have netbios disabled.
Why is the router doing this?
thanks


NetFixer
Bah Humbug
Premium
join:2004-06-24
The Boro
Reviews:
·Cingular Wireless
·Comcast Business..
·Vonage
Try setting your router's NetBIOS mode to "Point-to-Point (no broadcast)" instead of "Mixed-mode (Broadcast then Point-to-Point)" and see if that makes what is probably a NetBIOS broadcast you are seeing on port 137 stop.

FWIW, it would help the diagnosis if you had not masked the Source/Destination part of the firewall logs. It is never helpful to hide information from those you ask for help.
--
A well-regulated militia, being necessary to the security of a free State, the right of the people to keep and bear arms shall not be infringed.

When governments fear people, there is liberty. When the people fear the government, there is tyranny.


Cartel
Premium
join:2006-09-13
Chilliwack, BC
kudos:2
reply to Cartel
I tried to set to point to point and no broadcast and it still logged the 2 hits when I rebooted the router.

I have netbios announcement unchecked so that should do it you'd think.

I remove some data for security reasons.


NetFixer
Bah Humbug
Premium
join:2004-06-24
The Boro
Reviews:
·Cingular Wireless
·Comcast Business..
·Vonage
said by Cartel:

I tried to set to point to point and no broadcast and it still logged the 2 hits when I rebooted the router.

I have netbios announcement unchecked so that should do it you'd think.

I remove some data for security reasons.

Well any more help I could supply would require that you provide even more information than private IP addresses that can't be seen or reached from the Internet. Asking a surgeon to remove a tumor wearing a blindfold is likely to produce somewhat less than satisfactory results (unless you just like to bleed); so bye-bye.
--
A well-regulated militia, being necessary to the security of a free State, the right of the people to keep and bear arms shall not be infringed.

When governments fear people, there is liberty. When the people fear the government, there is tyranny.


Cartel
Premium
join:2006-09-13
Chilliwack, BC
kudos:2
Reviews:
·TELUS
·Shaw
·TekSavvy DSL

1 edit
said by NetFixer:

said by Cartel:

I tried to set to point to point and no broadcast and it still logged the 2 hits when I rebooted the router.

I have netbios announcement unchecked so that should do it you'd think.

I remove some data for security reasons.

Well any more help I could supply would require that you provide even more information than private IP addresses that can't be seen or reached from the Internet. Asking a surgeon to remove a tumor wearing a blindfold is likely to produce somewhat less than satisfactory results (unless you just like to bleed); so bye-bye.

So why waste your time and mine even posting?

I remove some data for security reasons.

deal with it


NetFixer
Bah Humbug
Premium
join:2004-06-24
The Boro
Reviews:
·Cingular Wireless
·Comcast Business..
·Vonage
said by Cartel:

said by NetFixer:

said by Cartel:

I tried to set to point to point and no broadcast and it still logged the 2 hits when I rebooted the router.

I have netbios announcement unchecked so that should do it you'd think.

I remove some data for security reasons.

Well any more help I could supply would require that you provide even more information than private IP addresses that can't be seen or reached from the Internet. Asking a surgeon to remove a tumor wearing a blindfold is likely to produce somewhat less than satisfactory results (unless you just like to bleed); so bye-bye.

So why waste your time and mine even posting?

I remove some data for security reasons.

deal with it

Even though you don't deserve any more of my time due to your attitude, I will post a hint from my DIR655 and EBR2310 LAN status displays (only because someone else reading this thread might benefit from the answer). You will note that the connected computers that have a name associated with the device, are computers running Windows with File and Printer Sharing enabled. The ones that do not display a hostname are computers and other devices that do not have Windows File and Printer Sharing. I will assume that you can find your own answer from the display screens below (and my explanation of what is displayed):







But again, if you had not decided to deliberately make answering your question more difficult by blocking the local IP addresses, I could have known if the blocked packets were broadcast packets or if they were directed to a specific IP address. I will now place you back on the blocked list where you deserve to reside.
--
A well-regulated militia, being necessary to the security of a free State, the right of the people to keep and bear arms shall not be infringed.

When governments fear people, there is liberty. When the people fear the government, there is tyranny.


Cartel
Premium
join:2006-09-13
Chilliwack, BC
kudos:2
Reviews:
·TELUS
·Shaw
·TekSavvy DSL
Anyone else know why the router is sending port 137 packets every 30 minutes?

thanks.

0000:00 2A 29 10 00 01 00 00 .*)....
0008:00 00 00 01 20 43 41 43 .... CAC
0010:41 43 41 43 41 43 41 43 ACACACAC
0018:41 43 41 43 41 43 41 43 ACACACAC
0020:41 43 41 43 41 43 41 43 ACACACAC
0028:41 43 41 41 41 00 00 20 ACAAA..
0030:00 01 C0 0C 00 20 00 01 ..À.. ..
0038:00 00 0E 10 00 06 40 00 .....@.
0040:1A 86 38 A4 †8¤

0000:00 2B 29 10 00 01 00 00 .+)....
0008:00 00 00 01 20 46 48 45 .... FHE
0010:50 46 43 45 4C 45 48 46 PFCELEHF
0018:43 45 50 46 46 46 41 43 CEPFFFAC
0020:41 43 41 43 41 43 41 43 ACACACAC
0028:41 43 41 41 41 00 00 20 ACAAA..
0030:00 01 C0 0C 00 20 00 01 ..À.. ..
0038:00 00 0E 10 00 06 C0 00 .....À.
0040:1A 86 38 A4 †8¤

0000:00 2D 29 10 00 01 00 00 .-)....
0008:00 00 00 01 20 46 48 45 .... FHE
0010:50 46 43 45 4C 45 48 46 PFCELEHF
0018:43 45 50 46 46 46 41 43 CEPFFFAC
0020:41 43 41 43 41 43 41 43 ACACACAC
0028:41 43 41 41 41 00 00 20 ACAAA..
0030:00 01 C0 0C 00 20 00 01 ..À.. ..
0038:00 00 0E 10 00 06 C0 00 .....À.
0040:1A 86 38 A4 †8¤