On Tue, 2007-12-11 at 09:37 -0500, Chris Knadle wrote: > On Monday 10 December 2007, Allen Weiner wrote: > > On Mon, 2007-12-10 at 22:28 -0500, Chris Knadle wrote: > > > Makes no sense. I don't think these are related. /etc/resolv.conf > > > only relates to DNS, which is stuff on port 53. Port 137 is for NETBIOS, > > > and which is nonroutable. Are you perhaps using tunnelling like with a > > > VPN connection or something? > > > > I followed a suggestion from PorkChop to restore my original resolv.conf > > and see what happens. I restored resolv.conf to its original value and > > rebooted. The UDP traffic to port 137 has stopped. > > I still think it's unrelated to changes to /etc/resolv.conf. As far s I > know, port 137 of Netbios is only used by Windows machines in order to > discover computer names and shares for showing things in the "Network > Neighborhood". The entry in /etc/serivces of 'netbios-ns' means "netbios > name services" -- that's *NOT* directly related to DNS, even though it sounds > like it could be. > Were you doing anything with SMB shares or Samba before rebooting? > No, I wasn't doing anything with SMB shares or Samba.
Today I'm running with my original resolv.conf. System has been up for 1.5 hours. There hasn't been one UDP packet to port 137 logged. So, maybe in principle, there should be no connection between changes in resolv.conf and the iptables logging of UDP packets to port 137, but on my system there seems to be a direct relationship (perhaps accidental). I have no idea why, and no idea how someone skilled in troubleshooting would find out. Mike Kershaw mentioned that a reboot is unnecessary. When I restored my original resolv.conf,before rebooting I was still getting UDP port 137 packets being logged, so I *ass*umed that a reboot was necessary for the resolv.conf changes to take effect. Hopefully, this doesn't matter, but I used kedit to make the changes to resolv.conf. This leaves around a backup file. _______________________________________________ Mid-Hudson Valley Linux Users Group http://mhvlug.org http://mhvlug.org/cgi-bin/mailman/listinfo/mhvlug Upcoming Meetings (6pm - 8pm) MHVLS Auditorium Dec 5 - Open Source Show and Tell Jan 2 - TBD Feb 6 - DBUS Mar 5 - Setting up a platform-independent home/small office network using Linux
