Solved

Blocking UDP 137

Posted on 2006-06-26
2
455 Views
Last Modified: 2010-03-19
Hello there!

I have a situation that is somewhat suspicious.  I notice in my router log requests to an outside IP address on UDP port 137 from an XP workstation on my LAN.  

The external IP is from a network that I used to log into via Cisco VPN client software (although the IP address of the PIX I used to log into is not the same as the address in my firewall).

I don't see any Cisco related processes running in task manager.  

I guess my question is two-fold:

1.  How can I track down the process that is generating these requests

2.  How can I use netsh to block the requests

Thanks in advance!
0
Comment
Question by:ttist25
2 Comments
 
LVL 10

Accepted Solution

by:
naveedb earned 500 total points
Comment Utility
To see which application is trying to connect, download the following software and run it on the workstation;

http://www.sysinternals.com/Utilities/TcpView.html

Most likely, the workstations is tryint to do NetBIOS name resolution. If you are using pure windows XP environment, you can disable Netbios resolution by going into Advanced TCP/IP properties under WINS.

The better method however would be to block it on the firewall.
0
 
LVL 1

Author Comment

by:ttist25
Comment Utility
Thanks naveedb.  That seems to have stopped the requests.  I can't figure out what process is causing it to call out though.  

0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

This is an article about my experiences with remote access to my clients (so that I may serve them) and eventually to my home office system via Radmin Remote Control. I have been using remote access for over 10 years and have been improving my metho…
If your business is like most, chances are you still need to maintain a fax infrastructure for your staff. It’s hard to believe that a communication technology that was thriving in the mid-80s could still be an essential part of your team’s modern I…
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now