netstat , netbios-ssn

[XtremeMaC]

Hi there

I'm wondering what this thing means?

netbios-ssn

there is this guy keeps connecting to my comp

I found all about him, he lives 1 floor above 4 rooms down from me.

now he's annoying me.

i don't really know what netbios-ssn is, is he port scanning or something?

or is he trying to send me some packets? or what

should i be concerned, i haven't installed firewall, using xp sp2 firewall now..

Thanks

ip: 66.71.50.145

he's connecting me at port 3803...

edit: picture removed

Edited April 8, 2004 by XtremeMaC

[XtremeMaC]

no one know what it is?

its still continuing

what the heck is it? pls?

what the heck is that person trying to do??

[spud]

If i was you, install a firewall till you find out what that is.

I had a quick search on the net but couldn't find anything

[TomcaT]

Don't know if this helps you??? however read it and then draw your own conclusions, then GO upstairs..... kick his door in, kick his head in and rip his cpu out and jump up and down on it............

Link

[XtremeMaC]

i already paid him a visit

his door was locked. since then i've been waiting for an answer..

though it doesn't answer directly, it helped thanks!

[Aaron]

Use a firewall, that's what they're for.

[XtremeMaC]

aaron tell it to ms I am using sp2 firewall

i guess i should MOVE on from it

long live zonealarm

its good that ms tries to put everthing together but u know....

do it properly or don't do it(well i know i just said that but they're in learning phase and they're using us as genua pigs )

[chloroform]

Here's what I found out about netbios-ssn ....

Seems to be a process used by SAMBA (seems to be a Linux distribution) for Windows Networking compatibiity.

Quick explanation of netbios-ssn ...

NetBIOS explanation

and here:

More info on NetBIOS

Seems it's a vulnerability in Windows based systems. More info here:

Vulnerability information

The following link is an article on how to restrict anonymous access. It's for Windows 2000, but I'm pretty sure it'll work on XP.

Restricting anonymous connections

Hope that helps .

[XtremeMaC]

thanks really helpfull!!

hmm that's right we use samba for connecting to networked drives. (my web server)

but what the heck is he doing in mine?

i've no direct links to my site and my main site is blank.

hmm does he have access to my networked drives? $*$#%

well anyways thanks everyone for their support. i don't see him anymore. if i see him i know where to knock

[chloroform]

I'm gussing he established an anonymous connection to your computer. I wouldn't really know though, since I'm not him, and I'm not all that great when it comes to all this vulnerability stuff .

[newdles]

What operating system do you run? NetBIOS isn't just for Linux networking to Windows. It's actually its own language. It stands for Network Basic Input/Output System. All it does is allow applications on different computers to communicate with each other. Here is a link for you to learn a bit about it if interested - http://huizen.dds.nl/~jacco2/samba/smb.html

Here, go have fun http://members.rogers.com/viperzone/HelpFi...rk/netstat.html

newdles

http://www.webzila.com

[XtremeMaC]

i've xp using samba.

i just looked again its still connected this time on port 1059

i'll definitely pay him a visit he seems to be an annoying person

that's him. tomorrow to be killed

http://www.personal.psu.edu/users/j/d/jdk289/

[newdles]

I’ve been playing way too much “Enter The Matrix” and not doing enough online.

This guy has the wrong idea. He's been doing too much of everything he's doing and needs to get out and enjoy life. There is so much more than just behind a computer monitor all day long. I love my computer(s) and enjoy using them as well as configuring and tweaking them here and there when needed. However, I live my own life and enjoy doing other things. This guy has nothing but a computer it seems. Shame.

newdles

http://www.webzila.com

[TomcaT]

Well???? Is he dead? did he explain himself b4 U wiped him out?? In suspense!!!

[XtremeMaC]

lol

whenever i went to his room, it was locked and no one replied.

instead i went to resident computing thing and wrote him up hahah

but u know they always work slooowly and they said he might have a virus or something. but i don't see any virus that is set to attack my computer :#!$ anyways firewall does its job. i've blocked all incoming and outgoing stuff from his ip.