Still wondering about odd ports open.

[Christopher R. Hertel]

I've asked about this before  It's just got me wondering.

TCP/138 has no defined behavior under NBT, and group name replies on
TCP/137 are seldom--if ever--implemented even though it is in the RFCs.
With this in mind, consider the exchange below:

C:> ver

Windows 95. [Version 4.00.1111]

C:> netstat -a

Active Connections

  Proto  Local Address          Foreign Address        State
  TCP    paris:137              PARIS:0                LISTENING
  TCP    paris:138              PARIS:0                LISTENING
  TCP    paris:nbsession        PARIS:0                LISTENING
  UDP    paris:nbname           *:*
  UDP    paris:nbdatagram       *:*


It's those first two TCP lines that get me wondering.  What are they 
*doing* on those ports?

Chris -)-----

-- 
Christopher R. Hertel -)-----                   University of Minnesota
crh at nts.umn.edu              Networking and Telecommunications Services

    Ideals are like stars; you will not succeed in touching them
    with your hands...you choose them as your guides, and following
    them you will reach your destiny.  --Carl Schultz