llsteve80 Posted August 23, 2008 Report Share Posted August 23, 2008 I know a bunch of you guys are techies of some sort, so here's a question I have. I'm running peer guardian, not downloading anything at all, I just run it all the time. A bunch of people from this school got sued last year for pirated music so I'm staying away from that, but still feels safer with the extra firewall PG provides. But even with no bittorrent client or P2P network running, heck even with no browser running, PG is blocking tons of traffic from the school. What does does this mean? Are they trying to scan my comp or something? I don't care for censorship, spying, or any of that stuff like google analytics. Heres a screenshot: Quote Link to comment Share on other sites More sharing options...
Digital Posted August 23, 2008 Report Share Posted August 23, 2008 It looks like it's SNMP traffic, not a huge deal. Quote Link to comment Share on other sites More sharing options...
Pugwash Posted August 23, 2008 Report Share Posted August 23, 2008 Port 137 is your Windows sharing being probed. Port 1900 is most likely Windows Messenger, scanning for UPNP. None of this is dangerous, but it's why network administrators consider Windows a hateful liability. You connect your PC to the LAN and it tells everyone around you "Hey, look at me! Try and see if I'm sharing stuff or providing services!" without your approval. Quote Link to comment Share on other sites More sharing options...
Pugwash Posted August 23, 2008 Report Share Posted August 23, 2008 It looks like it's SNMP traffic, not a huge deal. SNMP on the netbios ports? Quote Link to comment Share on other sites More sharing options...
llsteve80 Posted August 23, 2008 Author Report Share Posted August 23, 2008 thanks pug and digital Quote Link to comment Share on other sites More sharing options...
P4GTR Posted August 23, 2008 Report Share Posted August 23, 2008 Do you have a need to connect to shared network resources, like a network printer, or network drives? Or just simply personal pc use via the schools internet provider? Quote Link to comment Share on other sites More sharing options...
llsteve80 Posted August 24, 2008 Author Report Share Posted August 24, 2008 Do you have a need to connect to shared network resources, like a network printer, or network drives? Or just simply personal pc use via the schools internet provider? No need to share printers or any of that although it is possible to do so if needed. Right now just using the ISP. Of course had to install the schools preferred virus protection and cisco clean agent to protect the network I guess. Supposedly it can tell if your copy of windows is legit, and if not you will have no access. Quote Link to comment Share on other sites More sharing options...
Digital Posted August 24, 2008 Report Share Posted August 24, 2008 SNMP on the netbios ports? Yep, you can do it; more accurately it can be done. Quote Link to comment Share on other sites More sharing options...
Pugwash Posted August 24, 2008 Report Share Posted August 24, 2008 Yep, you can do it; more accurately it can be done. Of course it can be done. The problem is both client and server need to explicitly be told to use the non-standard ports. Quote Link to comment Share on other sites More sharing options...
Shundi Posted August 24, 2008 Report Share Posted August 24, 2008 Hmm I thought I posted here before but for some reason it didn't show up... If you click PeerGuardian, select "List Manager" and uncheck "Educational" and keep "Government", "Spyware" and "P2P" blocked it should stop blocking NIU (Unless for some reason you'd need other .edu domains blocked). Quote Link to comment Share on other sites More sharing options...
P4GTR Posted August 25, 2008 Report Share Posted August 25, 2008 Port 137 is your Windows sharing being probed. Port 1900 is most likely Windows Messenger, scanning for UPNP. You connect your PC to the LAN and it tells everyone around you "Hey, look at me! Try and see if I'm sharing stuff or providing services!" without your approval. Which is why I'm thinking he should at least remove file and printer sharing from his stack. He's not connecting to any shared network resources, couldn't hurt. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.