nmbd sends SYN packet to external Network address

Andreas Moroder andreas.moroder at sb-brixen.it
Fri Sep 13 06:19:01 GMT 2002

Hello all,

i looked into the nmb.log of my wins server ( samba 1.9.7 on HP-UX ) and found
the following lines

wins_process_name_query: name query for name 59345424260<20> from IP
wins_process_name_query: name query for name 59345424260<20> not found - doing d
ns lookup.
added DNS query for 59345424260<20>
add_dns_result: DNS gave answer for 59345424260 of
add_name_to_subnet: Added netbios name 59345424260<20> with first IP
32 ttl=7200 nb_flags= 4 to subnet WINS_SERVER_SUBNET
DNS calling send_wins_name_query_response

Does this happen ?
- my server tries to resolve the name 59345424260
- the wins server gives him a external address as answer 
( with nslookup 59345424260 does NOT resolve, so I don't know where the address
comes from )
- my server tries to contact the address
- my pix stops this packets and logs the error.

Now my big question, why does my server try to resolve this strange name ?
Can it be a PC that was in our net with this name and now is no more here ?


Zitiere Volker.Lendecke at SerNet.DE:

> Hash: SHA1
> > it tries to send at the ports 139 and 445
> Wie schon auf der Liste geantwortet wurde, will der nmbd bestimmt
> seine Browse Listen synchronisieren. Das tut er immer mit dem Domain
> Master Browser, der bei echtem NT immer auf dem PDC läuft. Kann es so
> etwas sein?
> Volker
> Version: GnuPG v1.0.6 (GNU/Linux)
> Comment: Key-ID ADE377D8, Fingerprint available: phone +49 551 3700000
> iD8DBQE9gJ3EZeeQha3jd9gRAkS/AJ9kizxRkMiMFag53dX7PO0PBW4uRgCfVvEU
> GI7LBgznRxtxUjGkH70Dt4o=
> =OmVu

Dr. Andreas Moroder
Sanitätsbetrieb Brixen - Azienda Sanitaria di Bressanone
   www.sb-brixen.it    -      www.as-bressanone.it

More information about the samba-technical mailing list