AW: bind is tries to connect an unknown host an port 137 ?!

Nikolas Hagelstein NHagelstein at helcom.de
Fri May 19 13:13:17 UTC 2000


 
> Looks like a DNS reply. I'd suspect someone connected a laptop PC to
> your LAN that had previously been connected to the Internet by dialin
> and is still using the source address it had gotten from the ISP.
> You'll have to use a packet sniffer to make sure.


The dialin ip didn't belong to the same network (194.x.x.x) <->
(192.168.0.0) so
the laptop IMHO would never reach the dns (no route to host). In addition a
DNS reply 
to port 137 seems strange to me....
bye,
           Nikolas
 



More information about the bind-users mailing list