BDC Excessive Broadcast Traffic on Src and Dst Port 137

I have a BDC that was saturating a LAN segment today.  When I sniffed the traffic, the BDC was pumping out Netbios Broadcast traffic with both source and destination port 137.  Is this normal?  The IP configuration of the BDC is correct.  
asafayanAsked:
Who is Participating?
 
GnartCommented:
YOu may have Blaster or Welchia on the network, may be on the BDC.

http://support.microsoft.com/default.aspx?scid=kb;en-us;826955&Product=nts40

Run antivrus software and remove it.

cheers
0
 
tbird008Commented:
Hi asafayan,

Do you really need to enable Netbios for your network?  Is there wins server around?  You might want to check out if there are virus in this machine, make sure all security patches are installed.  Try to turn off Netbios and check or try turning off Computer Browser just for testing.  List all related event warning here.

Tbird008
0
 
John Gates, CISSPSecurity ProfessionalCommented:
I would go with gnart on that one and go to :
www.symantec.com for virus detection and online removal tools!

D
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.