Greetings List, I am having a problem with Samba sending out packets with 0 ttl. The main problem is that my IDS complains about it constantly. I know that I can change the IDS rules such that it does not alarm on this, but it seems to me that Samba should never send out a 0 ttl packet.
I do have a packet trace of the offense (available if necessary), but essentially it is: 11:29:13.045728 192.168.1.1.netbios-ns > 192.168.1.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST (DF) [ttl 0] When I stop the smb service (service smb stop - stopping both smb and nmb), these packets do stop occurring. This is samba-3.0.9-1.3E.2 on RHEL 3.0 Any clues, suggestions, rants, etc are most welcome. Thank you, -Grant ------------------ This electronic message transmission is a PRIVATE communication which contains information which may be confidential or privileged. The information is intended to be for the use of the individual or entity named above. If you are not the intended recipient, please be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. Please notify the sender of the delivery error by replying to this message, or notify us by telephone (877-633-2436, ext. 0), and then delete it from your system. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
