llsteve80 Posted August 23, 2008 Report Share Posted August 23, 2008 I know a bunch of you guys are techies of some sort, so here's a question I have. I'm running peer guardian, not downloading anything at all, I just run it all the time. A bunch of people from this school got sued last year for pirated music so I'm staying away from that, but still feels safer with the extra firewall PG provides. But even with no bittorrent client or P2P network running, heck even with no browser running, PG is blocking tons of traffic from the school. What does does this mean? Are they trying to scan my comp or something? I don't care for censorship, spying, or any of that stuff like google analytics. Heres a screenshot: Link to comment Share on other sites More sharing options...
Digital Posted August 23, 2008 Report Share Posted August 23, 2008 It looks like it's SNMP traffic, not a huge deal. Link to comment Share on other sites More sharing options...
Pugwash Posted August 23, 2008 Report Share Posted August 23, 2008 Port 137 is your Windows sharing being probed. Port 1900 is most likely Windows Messenger, scanning for UPNP. None of this is dangerous, but it's why network administrators consider Windows a hateful liability. You connect your PC to the LAN and it tells everyone around you "Hey, look at me! Try and see if I'm sharing stuff or providing services!" without your approval. Link to comment Share on other sites More sharing options...
Pugwash Posted August 23, 2008 Report Share Posted August 23, 2008 It looks like it's SNMP traffic, not a huge deal. SNMP on the netbios ports? Link to comment Share on other sites More sharing options...
llsteve80 Posted August 23, 2008 Author Report Share Posted August 23, 2008 thanks pug and digital Link to comment Share on other sites More sharing options...
P4GTR Posted August 23, 2008 Report Share Posted August 23, 2008 Do you have a need to connect to shared network resources, like a network printer, or network drives? Or just simply personal pc use via the schools internet provider? Link to comment Share on other sites More sharing options...
llsteve80 Posted August 24, 2008 Author Report Share Posted August 24, 2008 Do you have a need to connect to shared network resources, like a network printer, or network drives? Or just simply personal pc use via the schools internet provider? No need to share printers or any of that although it is possible to do so if needed. Right now just using the ISP. Of course had to install the schools preferred virus protection and cisco clean agent to protect the network I guess. Supposedly it can tell if your copy of windows is legit, and if not you will have no access. Link to comment Share on other sites More sharing options...
Digital Posted August 24, 2008 Report Share Posted August 24, 2008 SNMP on the netbios ports? Yep, you can do it; more accurately it can be done. Link to comment Share on other sites More sharing options...
Pugwash Posted August 24, 2008 Report Share Posted August 24, 2008 Yep, you can do it; more accurately it can be done. Of course it can be done. The problem is both client and server need to explicitly be told to use the non-standard ports. Link to comment Share on other sites More sharing options...
Shundi Posted August 24, 2008 Report Share Posted August 24, 2008 Hmm I thought I posted here before but for some reason it didn't show up... If you click PeerGuardian, select "List Manager" and uncheck "Educational" and keep "Government", "Spyware" and "P2P" blocked it should stop blocking NIU (Unless for some reason you'd need other .edu domains blocked). Link to comment Share on other sites More sharing options...
P4GTR Posted August 25, 2008 Report Share Posted August 25, 2008 Port 137 is your Windows sharing being probed. Port 1900 is most likely Windows Messenger, scanning for UPNP. You connect your PC to the LAN and it tells everyone around you "Hey, look at me! Try and see if I'm sharing stuff or providing services!" without your approval. Which is why I'm thinking he should at least remove file and printer sharing from his stack. He's not connecting to any shared network resources, couldn't hurt. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now