cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
290
Views
0
Helpful
2
Replies

Netbios packets to unknown address

rj.remien
Level 1
Level 1

My access list applied to my inside interface is denying packets from one of my WINS servers/137 to an unknown address 0.0.0.100/137. I am unable to ping this address and it does not show ip in my WINS database. Does anyone have any ideas?

Thanks,

RJ

2 Replies 2

gfullage
Cisco Employee
Cisco Employee

I doubt this is a valid address, probably something funky the WINS server is doing. You might want to talk to Microsoft about it to see why it's doing it. The PIX is doing it's job and denying it, that's all you need to know, I wouldn't let it through cause you don't know what it is, and as I said, I doubt it's a valid packet anyway.

WIndows will do direct netbios name resolution requests to hosts if they cannot resolve the hostname any other way. It appears that for some reason some box of yours wants to know who that ip is.

I wouldn't worry a ton about it.