Seeing Windows clients trying to connect to the EP mapper via TCP

[Richard Sharpe]

On Mon, Aug 19, 2013 at 4:27 PM, Jeremy Allison <jra at samba.org> wrote:
> On Mon, Aug 19, 2013 at 03:47:51PM -0700, Richard Sharpe wrote:
>> Hi folks,
>>
>> Has anyone seen a Windows client trying to connect to a Samba (3.6.12+)
>> server on port 135?
>>
>> I have a capture where a Windows client tries to do that, gets no response,
>> and then after getting no response after 12 seconds, then does a
>> TreeConnect to IPC$ and opens the winreg named pipe.
>>
>> Looks like the Windows client is confused but I wonder why it is confused?
>
> Previously run Samba4.0 on the same IP address ?

I very much doubt that these people have ever run Samba 4 before, but
maybe they have.

-- 
Regards,
Richard Sharpe
(何以解憂？唯有杜康。--曹操)