[Samba] Samba UDP Packet 0 TTL
Grant.Sturgis at arraybiopharma.com
Fri Mar 11 18:53:29 GMT 2005
I am having a problem with Samba sending out packets with 0 ttl. The
main problem is that my IDS complains about it constantly. I know that
I can change the IDS rules such that it does not alarm on this, but it
seems to me that Samba should never send out a 0 ttl packet.
I do have a packet trace of the offense (available if necessary), but
essentially it is:
11:29:13.045728 192.168.1.1.netbios-ns > 192.168.1.255.netbios-ns: NBT
UDP PACKET(137): QUERY; REQUEST; BROADCAST (DF) [ttl 0]
When I stop the smb service (service smb stop - stopping both smb and
nmb), these packets do stop occurring.
This is samba-3.0.9-1.3E.2 on RHEL 3.0
Any clues, suggestions, rants, etc are most welcome.
This electronic message transmission is a PRIVATE communication which contains
information which may be confidential or privileged. The information is intended
to be for the use of the individual or entity named above. If you are not the
intended recipient, please be aware that any disclosure, copying, distribution
or use of the contents of this information is prohibited. Please notify the
sender of the delivery error by replying to this message, or notify us by
telephone (877-633-2436, ext. 0), and then delete it from your system.
More information about the samba