Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 483
  • Last Modified:

Blocking UDP 137

Hello there!

I have a situation that is somewhat suspicious.  I notice in my router log requests to an outside IP address on UDP port 137 from an XP workstation on my LAN.  

The external IP is from a network that I used to log into via Cisco VPN client software (although the IP address of the PIX I used to log into is not the same as the address in my firewall).

I don't see any Cisco related processes running in task manager.  

I guess my question is two-fold:

1.  How can I track down the process that is generating these requests

2.  How can I use netsh to block the requests

Thanks in advance!
0
ttist25
Asked:
ttist25
1 Solution
 
naveedbCommented:
To see which application is trying to connect, download the following software and run it on the workstation;

http://www.sysinternals.com/Utilities/TcpView.html

Most likely, the workstations is tryint to do NetBIOS name resolution. If you are using pure windows XP environment, you can disable Netbios resolution by going into Advanced TCP/IP properties under WINS.

The better method however would be to block it on the firewall.
0
 
ttist25Author Commented:
Thanks naveedb.  That seems to have stopped the requests.  I can't figure out what process is causing it to call out though.  

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now