From: Kenn Humborg (kenn at domain avalon.wombat.ie)
Date: Sun 17 Oct 1999 - 18:19:01 IST
On Sun, Oct 17, 1999 at 05:53:52PM +0100, Alan Sobey wrote:
> Hi all,
>
> I've a linux box acting as a router (to the internet, via ppp), ipmasqing a
> few windows machines. The linux box is configured to disconnect after 10
> min idle time. Either due to the linux box running samba, or the windows
> boxes, netbios requests are broadcast on udp port 50 every 5 minutes as
> shown below, with 4 packets each, thus preventing a timeout.
>
> e.g. From tcpdump:
> 23:25:05.733254 159.134.218.154.netbios-ns > 255.255.255.255.netbios-ns: udp
> 50
[...snip...]
>
> 1) Why port 50, shouldn't it be one of netbios udp ports 137-139 as listed
> in /etc/services? If this is a case of RTFM, just say so, good pointers are
> appreciated.
That '50' at the end is the length of the packet, not the port.
(I can't remember if this includes the UDP headers or not.)
Kenn
This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:04:44 GMT