Re: [ActiveDir] DC Establishing Session to client on TCP139

[Paul Williams]

It's probably SMB (CIFS).  The NT5.x client service attempts to establish SMB sessions using both 445 and 137/8/9 (whichever one).  The first to reply is what is used.  If 445, it's SMB over TCP/IP.  If the NetBT 3, then it's SMB over NetBIOS over TCP/IP (NetBT).   Note.  It doesn't use all three of the NetBT3, I just don't remember what's what.     --Paul ----- Original Message ----- From: Brian Desmond To: ActiveDir@mail.activedir.org Sent: Thursday, September 21, 2006 2:53 AM Subject: [ActiveDir] DC Establishing Session to client on TCP139 I’m seeing a lot of hits in firewall logs for DCs trying to establish sessions to clients on TCP139 (NBT Session Service). Does anyone know why this is happening or if it’s necessary?   Thanks, Brian Desmond [EMAIL PROTECTED]   c - 312.731.3132