netbios SSN

[mo0069]

hey everybody

i seem to get a weird netbios thingie sometime when a netstat

TCP WADDA:netbios-ssn 41.207.125.125:2572 ESTABLISHED
TCP WADDA:netbios-ssn 41.208.165.82:4422 ESTABLISHED

what on earth is that????
im not running anything except skype,msn and gtalk???

any ideas?

 

[eltherza]

This might help:

http://archives.neohapsis.com/archives/firewalls/2000-q3/1301.html

also

"39 TCP netbios-ssn
Port 139 is used on Windows machines for NetBios name resolution, WINS, etc. A problem with older unpatched versions of Windows is that they are susceptible to receipt of Out-Of-Band (OOB) data. This means that someone can remotely send you OOB data on port 139 and can cause numerous problems on your machine, including but not limited to machine lockups, blue screens, loss of internet connection.

You should do one of several things: a) upgrade/patch your operating system to make sure it is not susceptible to this attack; b) firewall your system so that port 139 is not visible from the internet c) configure your router to block port 139; d) Install one of several monitoring packages on your PC that block this denial of service. "

 

[mo0069]

thanks