Samba UDP Packet 0 TTL

[Sturgis, Grant]

Greetings List,

This message was initially posted to the general samba list, but no
response:


I am having a problem with Samba sending out packets with 0 ttl.  The
main problem is that my IDS complains about it constantly.  I know that
I can change the IDS rules such that it does not alarm on this, but it
seems to me that Samba should never send out a 0 ttl packet.

I do have a packet trace of the offense (available if necessary), but
essentially it is:

11:29:13.045728 192.168.1.1.netbios-ns > 192.168.1.255.netbios-ns: NBT
UDP PACKET(137): QUERY; REQUEST; BROADCAST (DF) [ttl 0]

When I stop the smb service (service smb stop - stopping both smb and
nmb), these packets do stop occurring.  

This is samba-3.0.9-1.3E.2 on RHEL 3.0

Any clues, suggestions, rants, etc are most welcome.

Thank you,

-Grant
------------------

This electronic message transmission is a PRIVATE communication which contains
information which may be confidential or privileged. The information is intended 
to be for the use of the individual or entity named above. If you are not the 
intended recipient, please be aware that any disclosure, copying, distribution 
or use of the contents of this information is prohibited. Please notify the
sender  of the delivery error by replying to this message, or notify us by
telephone (877-633-2436, ext. 0), and then delete it from your system.