LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 06-30-2009, 09:11 PM   #1
mikesjays
Member
 
Registered: Dec 2005
Distribution: FC8, FC9, FC10
Posts: 30

Rep: Reputation: 15
nmbd broadcasting UDP to 169.254.0.2?


I was getting some odd entries on my firewall logs, see below
Code:
21:40:28  Default DROP  UDP  192.168.1.2:137 → 169.254.0.2:137 len=78 ttl=63 tos=0x00 srcmac=00:0a:5e:05:68:ca  dstmac=00:0a:5e:05:62:6d
21:40:34  Default DROP  UDP  192.168.1.2:137 → 169.254.0.2:137 len=78 ttl=63 tos=0x00 srcmac=00:0a:5e:05:68:ca  dstmac=00:0a:5e:05:62:6d
21:40:39  Default DROP  UDP  192.168.1.2:137 → 169.254.0.2:137 len=78 ttl=63 tos=0x00 srcmac=00:0a:5e:05:68:ca  dstmac=00:0a:5e:05:62:6d
21:40:44  Default DROP  UDP  192.168.1.2:137 → 169.254.0.2:137 len=78 ttl=63 tos=0x00 srcmac=00:0a:5e:05:68:ca  dstmac=00:0a:5e:05:62:6d
So used lsof to find out what was using port 137.

Code:
nmbd        911        0    7u  IPv4 1944241      0t0  UDP *:137 
nmbd        911        0    8u  IPv4 1944242      0t0  UDP *:138 
nmbd        911        0    9u  IPv4 1944244      0t0  UDP 192.168.1.2:137 
nmbd        911        0   10u  IPv4 1944245      0t0  UDP 192.168.1.2:138
I'm not sure why it is doing this and any help getting it to stop would be much appreciated.
 
Old 06-30-2009, 09:40 PM   #2
AsusDave
Member
 
Registered: Jul 2008
Distribution: Debian, Ubuntu 10.04
Posts: 151

Rep: Reputation: 34
I found this

http://us1.samba.org/samba/docs/man/...-3/nmbd.8.html

under the -p flag description it mentions nmbd responding to name queries on port 137

I don't know why/what would be causing it though.

HTH
Dave
 
Old 06-30-2009, 09:42 PM   #3
stress_junkie
Senior Member
 
Registered: Dec 2005
Location: Massachusetts, USA
Distribution: Ubuntu 10.04 and CentOS 5.5
Posts: 3,873

Rep: Reputation: 331Reputation: 331Reputation: 331Reputation: 331
Nmbd is the Samba NetBIOS name service that comes with Samba Server software. Port 137 is used for NetBIOS name service communications.

You will have to figure out the significance of the IP address 169.254.0.2 yourself. I tried using dig -x 169.254.0.2 but it didn't return any useful information.

Last edited by stress_junkie; 06-30-2009 at 09:44 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Removing DHCP (169.254.0.0) From static routes Alistair Linux - Networking 2 09-02-2011 09:49 AM
The nvidia driver 169.09 was working fine, until I upgraded it to 169.12 dv502 Linux - General 1 03-22-2008 05:09 AM
Destination 169.254.0.0 ESOOJAY Linux - Networking 1 05-13-2007 05:23 PM
Odd IP address 169.254.187.86 in ifconfig (Etch) farpoint Debian 8 12-11-2006 11:10 AM
169.254.0.0 in Kernal IP routing table aikempshall Linux - Networking 13 03-10-2004 11:30 PM


All times are GMT -5. The time now is 07:37 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration