Is this one machine sending them, multiple? If it is a lot from multiple you could have some browser wars raging. Kill the stupid browser service.
Other than browsing (or a virus?) you shouldn't see much in the way of broadcasts for that as long as your WINS is working properly. ------------- http://www.joeware.net (download joeware) http://www.cafeshops.com/joewarenet (wear joeware) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of ILyas Sent: Thursday, March 04, 2004 2:27 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Broadcast - 138 port Hi Have no idea whether this is normal. My firewall log shows more broadcasts being sent to the IP 192.168.0.255 to the port 138. Our network uses static IP and not DHCP in a Win 2k environment. All the clients are Win 2k pro except 2 (win98). My query: Why does it generates more broadcast traffic. The log is full of these broadcasts dropped log, and I don't know how to reduce this traffic. I learnt that port 138 is for NetBIOS Datagram Service. In a Win2k environment, would this NetBIOS be active, that too to this extent? Is there a chance of performace degradation with this issue? Thanks for any help. ILyas Conares IT Dept Dubai, uae Tel: +9714 8835 111 Fax: +9714 8836 611 Cell:+97150 6550 894 ************* LOG ************* 04/03/2004 02:19:29.416 - Broadcast packet dropped - Source:192.168.0.127, 138, LAN - Destination:192.168.0.255, 138, LAN - Code:17 - ************* LOG ************* List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
