General discussion

  • Creator
    Topic
  • #2313460

    Black ICE Defender & networking

    Locked

    by gemailhiot ·

    I have a client running a win98SE network of 2 stations, sharing a DSL internet connection through a network hub.
    since they are running multi-user apps, the shared printer, and database files reside on one computer.
    Black ICE Defender has been installed on both machines.
    Why would the machine acting as a pseudo-server get tons of intruder hits, while the other computer is relatively hit-free?
    The one getting all the hits gets a lot of NetBIOS hits. Is that related to networking?

    Thanksfor the help,

    gilles mailhiot

All Comments

  • Author
    Replies
    • #3535956

      Black ICE Defender & networking

      by kahless1972 ·

      In reply to Black ICE Defender & networking

      More than likely the hits are due to the network,Also you may want to check your network configuration the second machine may be sharing the connection with the first wich is why the first machine gets all the hits.My isp gave me a second ip addressfor an additional machine that when configured properly was seen as a standalone as far as internet traffic.This allowed my machines to have an internal network wothout having one of my machines act as a gateway.Hope this helps

    • #3535453

      Black ICE Defender & networking

      by joseph moore ·

      In reply to Black ICE Defender & networking

      You don’t say if the attacked machine is running Internet Connection Sharing so the 2nd machine can access the Internet. If that is probably the case, then the live IP address your client has is on the attacked machine, while the 2nd machine does NOT have a live IP. The 2nd machine is probably using a 192.168.0.0/24 address (a private IP address not valid on the Internet).

      Anymore, you are gonna see countless NetBIOS hits (UPD port 137, TCP port 139) on the attacked machine. That is just a reality of the Internet and Windows machines. They talk NetBIOS so much it is hysterical! For example, when I connect to certain MP3 streaming stations, I get hit with NetBIOS name requests each time! Windows seems to use NetBIOS for just about everything!
      Plus, there are so many free tools out there that make NetBIOS requests, and so many script kiddies using these tools, that this is just how the Internet works. It is a very loud place.
      On a dialup connection, I get scan attempts like you seeevery 10 minutes!
      It is a crazy world we live in nowadays!

      hope this helps

    • #3354290

      Black ICE Defender & networking

      by gemailhiot ·

      In reply to Black ICE Defender & networking

      This question was auto closed due to inactivity

Viewing 2 reply threads