[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

Blocking UDP 137

Posted on 2006-06-26
2
Medium Priority
?
468 Views
Last Modified: 2010-03-19
Hello there!

I have a situation that is somewhat suspicious.  I notice in my router log requests to an outside IP address on UDP port 137 from an XP workstation on my LAN.  

The external IP is from a network that I used to log into via Cisco VPN client software (although the IP address of the PIX I used to log into is not the same as the address in my firewall).

I don't see any Cisco related processes running in task manager.  

I guess my question is two-fold:

1.  How can I track down the process that is generating these requests

2.  How can I use netsh to block the requests

Thanks in advance!
0
Comment
Question by:ttist25
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 10

Accepted Solution

by:
naveedb earned 2000 total points
ID: 16989424
To see which application is trying to connect, download the following software and run it on the workstation;

http://www.sysinternals.com/Utilities/TcpView.html

Most likely, the workstations is tryint to do NetBIOS name resolution. If you are using pure windows XP environment, you can disable Netbios resolution by going into Advanced TCP/IP properties under WINS.

The better method however would be to block it on the firewall.
0
 
LVL 1

Author Comment

by:ttist25
ID: 17010767
Thanks naveedb.  That seems to have stopped the requests.  I can't figure out what process is causing it to call out though.  

0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This program is used to assist in finding and resolving common problems with wireless connections.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Suggested Courses

649 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question