Edward,
I believ your machine is performing a netbios name request to your gnatbox,
because it is trying to get the machine name of the gnatbox. This can occur
if there is no reverse mapping from IP address to a machine name. There are
a number of ways to avoid this :
1 - Edit the windows hosts file to include a mapping for the gnatbox IP to
a name. The file is located :
win9x, WinME : %windir%
WinNT, 2K ( & probably XP too) : %windir%\system32\drivers\etc
(The file must not have an extention)
An example of the contents of said file might be :
# Beginning of hosts file. Lines beginning with # are comments, and are
ignored by Windows
192.168.0..9 gnatbox gnatbox.mydomain
# End of hosts file
The first entry is the IP
The second entry is an alias name for the gnatbox
Subsequent entries are FQDN's and other aliases for it.
2 - if your syslogger machine is setup for DNS name resolution by a DNS
server, have the DNS server configured to resolve the IP address of the
gnabox back to a name
|--------+----------------------------->
| | "Edward Ingram" |
| | <eingram@paymentres|
| | ource.com> |
| | Sent by: |
| | owner-gb-users@gta.|
| | com |
| | |
| | |
| | 23/10/2001 23:03 |
| | |
|--------+----------------------------->
>----------------------------------------------------------------------------------------------------------------------------------------------|
|
|
| To: <[EMAIL PROTECTED]>
|
| cc:
|
| Subject: Syslogger 3.2.1 attempts NETBIOS access to Gnatbox
|
>----------------------------------------------------------------------------------------------------------------------------------------------|
I get this log event over and over again...nearly once every second or so.
192.168.0.9�is where the Syslogger is being run from and 192.168.0.1 is
the internal interface for the firewall.� If I turn off Syslogger, then
event goes away.
Oct 23 15:04:50 FILTER: RAF (19) block - warning UDP [192.168.0.9/137]
->[192.168.0.1/137] fxp0 l=50
The Syslogger seems to be working fine...is there any reason why it would
need NETBIOS access?
Ed
Edward Ingram
Network/Systems Administrator
Payment Resources, Intl.
[EMAIL PROTECTED]
(949) 729-1400
(949) 729-1178 FAX
