>> I'm pretty sure port 137 is the NetBIOS name service. So it's probably >> WINS or browse list traffic? Someone else would know for sure. That's correct. >Port's 137-139 should be enough. > to find a definite list, just do a cat /etc/services | more this will tell you a good list of ports! ryan