Out of Line ? [Was: UDP port 137 Question]

I was not offended. The majority of garbage traffic directed at
us appears to be coming from MS things (for want of a better name).
I guess you could equate the MS thing to a typewriter and the person
that is using it to a monkey. Hmmm, MS == MonkeyShines*.

  * mon.key.shine \'m*n-ke--.shi-n\ n : a mischievous trick : PRANK

The table below shows some of the Monkeyshines I've seen (Jan 1 - Jan 11).
The biggy, 172.29.16.32 was traced to somewhere in Alternet. (I'm expecting
some resolution on that one any month now). All source addresses are
flowing from beyond our boarders and directed to real and/or imagined
hosts on our network. Our router filters these bogus things out. It
would be nice to track them all down and help the poor souls who are
just trying to get some work done.

Maybe some of you operators could stop it before it travels halfway around
the world to our site.

  Count Source Destination

  73663 172.29.16.32.netbios-ns 192.16.16.32.netbios-ns:
   4400 192.168.1.18.netbios-ns lanl-gw.lanl.gov.netbios-ns:
   1326 192.168.10.112.netbios-ns 192.16.10.1.netbios-ns:
   1140 192.168.2.2.netbios-ns ns1.lanl.gov.domain:
    777 192.168.1.19.netbios-ns lanl-gw.lanl.gov.netbios-ns:
    775 192.168.32.70.netbios-ns 192.16.0.252.netbios-ns:
    405 192.168.1.1.netbios-ns ns1.lanl.gov.domain:
    336 172.16.5.136.netbios-ns 192.16.4.173.netbios-ns:
    283 192.168.2.1.domain 192.16.17.130.netbios-ns:
    278 172.16.0.136.netbios-ns 192.16.0.2.netbios-ns:
    273 172.16.0.136.netbios-ns 192.16.0.1.netbios-ns:
    185 10.12.26.20.netbios-ns 128.165.159.194.netbios-ns:
    108 10.0.0.32.netbios-ns 128.165.74.124.netbios-ns:
     72 10.12.27.25.netbios-ns 128.165.48.48.netbios-ns:
     48 192.168.1.24.netbios-ns jackson.lanl.sps.mot.com.domain:
     44 192.168.1.171.netbios-ns 192.16.10.1.netbios-ns:
     39 10.12.31.144.netbios-ns 128.165.31.23.netbios-ns:
     38 10.12.26.49.netbios-ns 128.165.159.194.netbios-ns:
     35 10.12.26.49.netbios-ns 128.165.138.235.netbios-ns:
     34 192.168.1.1.ntp esa.lanl.gov.ntp:
     31 192.168.2.254.netbios-ns moat-in1.lanl.gov.netbios-ns:
     27 10.12.26.49.netbios-ns 128.165.189.205.netbios-ns:
     23 192.168.10.113.netbios-ns 192.16.10.1.netbios-ns:
     21 192.168.1.68.netbios-ns 128.165.133.18.netbios-ns:
     19 172.16.0.2.netbios-ns 192.16.0.1.domain:
     18 192.168.2.179.netbios-ns moat-in1.lanl.gov.netbios-ns:
     17 10.12.31.144.netbios-ns 128.165.191.201.netbios-ns:
     12 172.26.128.99.netbios-ns 192.16.10.100.netbios-ns:
     12 10.64.100.224.netbios-ns mailman.lanl.gov.netbios-ns:
     12 192.168.0.100.domain 192.16.16.6.netbios-ns:
      9 192.168.125.101.netbios-ns 128.165.203.7.netbios-ns:
      9 10.12.31.145.netbios-ns 128.165.98.248.netbios-ns:
      9 10.12.31.145.netbios-ns 128.165.48.16.netbios-ns:
      9 192.168.0.1.netbios-ns ns1.lanl.gov.domain:
      9 192.168.0.1.netbios-ns 192.16.0.254.domain:
      8 192.168.150.100.netbios-ns lanl-gw.lanl.gov.domain:
      8 192.168.115.2.netbios-ns apollo.osti.gov.netbios-ns:
      8 192.168.5.1.netbios-ns apollo.osti.gov.netbios-ns:
      7 192.168.9.1.netbios-ns 128.165.35.90.netbios-ns:
      6 192.168.115.2.netbios-ns vm1.hqadmin.doe.gov.netbios-ns:
      6 192.168.115.2.netbios-ns FONVILLE.ig.doe.gov.netbios-ns:
      6 192.168.115.2.netbios-ns DP-NOVIX.dp.doe.gov.netbios-ns:
      6 192.168.115.2.netbios-ns rt5a-ta3.lanl.gov.netbios-ns:
      6 192.168.115.2.netbios-ns wd20965.pnl.gov.netbios-ns:
      6 192.168.115.2.netbios-ns ssdcgs.llnl.gov.netbios-ns:
      6 192.168.115.2.netbios-ns pierce.llnl.gov.netbios-ns:
      6 192.168.115.2.netbios-ns sscdd.llnl.gov.netbios-ns:
      6 192.168.115.2.netbios-ns iosun.lanl.gov.netbios-ns:
      6 192.168.115.2.netbios-ns 128.165.71.217.netbios-ns:
      6 192.168.115.2.netbios-ns www.orau.gov.netbios-ns:
      6 192.168.115.2.netbios-ns bnl.gov.netbios-ns:
      6 192.168.10.1.netbios-ns ns-cic2.lanl.gov.netbios-ns:
      6 192.168.0.75.netbios-ns 128.165.81.65.netbios-ns:
      6 172.24.1.254.netbios-ns 128.165.64.100.netbios-ns:
      6 10.12.31.144.netbios-ns 128.165.13.21.netbios-ns:
      6 192.168.5.1.netbios-ns vm1.hqadmin.doe.gov.netbios-ns:
      6 192.168.5.1.netbios-ns FONVILLE.ig.doe.gov.netbios-ns:
      6 192.168.5.1.netbios-ns DP-NOVIX.dp.doe.gov.netbios-ns:
      6 192.168.5.1.netbios-ns rt5a-ta3.lanl.gov.netbios-ns:
      6 192.168.5.1.netbios-ns wd20965.pnl.gov.netbios-ns:
      6 192.168.5.1.netbios-ns ssdcgs.llnl.gov.netbios-ns:
      6 192.168.5.1.netbios-ns pierce.llnl.gov.netbios-ns:
      6 192.168.5.1.netbios-ns sscdd.llnl.gov.netbios-ns:
      6 192.168.5.1.netbios-ns 128.165.71.217.netbios-ns:
      6 192.168.5.1.netbios-ns www.orau.gov.netbios-ns:
      6 192.168.5.1.netbios-ns bnl.gov.netbios-ns:
      6 10.12.27.82.netbios-ns 128.165.57.246.netbios-ns:
      6 10.12.26.58.netbios-ns 128.165.99.148.netbios-ns:
      6 172.16.0.2.netbios-ns 128.165.159.234.netbios-ns:
      6 192.168.1.1 telomere.lanl.gov:
      5 192.168.115.2.netbios-ns nn-nov.nn.doe.gov.netbios-ns:
      5 192.168.115.2.netbios-ns maginot.pnl.gov.netbios-ns:
      5 192.168.115.2.netbios-ns pantex.com.netbios-ns:
      5 192.168.5.1.netbios-ns nn-nov.nn.doe.gov.netbios-ns:
      5 192.168.5.1.netbios-ns maginot.pnl.gov.netbios-ns:
      5 192.168.5.1.netbios-ns iosun.lanl.gov.netbios-ns:
      5 192.168.5.1.netbios-ns pantex.com.netbios-ns:
      5 10.1.1.1.netbios-ns 128.165.191.44.netbios-ns:
      5 10.0.0.1.netbios-ns 128.165.66.52.netbios-ns:
      5 172.18.16.82 192.16.10.100:
      4 192.168.115.2.netbios-ns ldancy2.llnl.gov.netbios-ns:
      4 192.168.5.1.netbios-ns jcoleman.lanl.gov.netbios-ns:
      4 192.168.5.1.netbios-ns ldancy2.llnl.gov.netbios-ns:
      4 192.168.5.1.netbios-ns drax15.llnl.gov.netbios-ns:
      4 192.168.1.1.netbios-ns 128.165.109.54.netbios-ns:
      3 192.168.125.105.netbios-ns 128.165.159.212.netbios-ns:
      3 192.168.125.105.netbios-ns 128.165.99.203.netbios-ns:
      3 192.168.125.103.netbios-ns 128.165.159.212.netbios-ns:
      3 192.168.125.103.netbios-ns 128.165.109.7.netbios-ns:
      3 192.168.125.102.netbios-ns 128.165.159.212.netbios-ns:
      3 192.168.125.102.netbios-ns 128.165.235.57.netbios-ns:
      3 192.168.125.101.netbios-ns 128.165.159.212.netbios-ns:
      3 192.168.125.101.netbios-ns 128.165.235.57.netbios-ns:
      3 192.168.125.100.netbios-ns 128.165.109.32.netbios-ns:
      3 172.22.102.251.netbios-ns 128.165.159.80.netbios-ns:
      3 172.22.102.251.netbios-ns 128.165.159.78.netbios-ns:
      3 192.168.115.2.netbios-ns pc-sargent.anlw.anl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns pc-rpowell.anlw.anl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns pc-french.anlw.anl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns WARRIOR.SLAC.Stanford.EDU.netbios-ns:
      3 192.168.115.2.netbios-ns pc-smout.anlw.anl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns cmartinpc.ops.anl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns nngdhcp03.nn.doe.gov.netbios-ns:
      3 192.168.115.2.netbios-ns krlclll.mst.lanl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns sscramirez.llnl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns nn-nov50.nn.doe.gov.netbios-ns:
      3 192.168.115.2.netbios-ns macendrese.llnl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns shorthair.lanl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns negtn01.ne.doe.gov.netbios-ns:
      3 192.168.115.2.netbios-ns vdunlop.llnl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns noble.nn.doe.gov.netbios-ns:
      3 192.168.115.2.netbios-ns bnlinfo1.bnl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns www3.dp.doe.gov.netbios-ns:
      3 192.168.115.2.netbios-ns wwhite.llnl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns wv01055.pnl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns wd19484.pnl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns tas.dne.bnl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns smokey.llnl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns isvan3.orau.gov.netbios-ns:
      3 192.168.115.2.netbios-ns drax15.llnl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns WV00367.pnl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns 128.115.114.249.netbios-ns:
      3 192.168.115.2.netbios-ns 128.115.114.124.netbios-ns:
      3 192.168.115.2.netbios-ns suntid.bnl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns sscsj.llnl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns sscml.llnl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns grant.llnl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns 192.188.34.102.netbios-ns:
      3 192.168.115.2.netbios-ns 146.139.254.81.netbios-ns:
      3 192.168.115.2.netbios-ns 128.165.95.187.netbios-ns:
      3 192.168.115.2.netbios-ns 128.165.90.111.netbios-ns:
      3 192.168.115.2.netbios-ns 128.165.71.161.netbios-ns:
      3 192.168.115.2.netbios-ns 128.165.71.110.netbios-ns:
      3 192.168.115.2.netbios-ns 128.165.66.163.netbios-ns:
      3 192.168.115.2.netbios-ns 128.165.31.71.netbios-ns:
      3 192.168.115.2.netbios-ns 128.165.31.66.netbios-ns:
      3 192.168.115.2.netbios-ns dns2.anl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns w4.lanl.gov.netbios-ns:
      3 192.168.115.2.netbios-ns fw.orau.gov.netbios-ns:
      3 172.23.170.12.netbios-ns 128.165.186.117.netbios-ns:
      3 192.168.80.1.netbios-ns 192.16.2.100.netbios-ns:
      3 192.168.2.95.netbios-ns 128.165.84.213.netbios-ns:
      3 192.168.2.95.netbios-ns 128.165.71.159.netbios-ns:
      3 192.168.2.95.netbios-ns 128.165.48.67.netbios-ns:
      3 192.168.2.95.netbios-ns 128.165.38.65.netbios-ns:
      3 192.168.2.95.netbios-ns 128.165.34.66.netbios-ns:
      3 192.168.1.11.netbios-ns bang.lanl.gov.netbios-ns:
      3 172.31.3.240.netbios-ns 128.165.173.253.netbios-ns:
      3 172.31.3.240.netbios-ns 128.165.96.201.netbios-ns:
      3 172.31.3.240.netbios-ns 128.165.190.60.netbios-ns:
      3 172.31.3.240.netbios-ns 128.165.131.94.netbios-ns:
      3 172.31.3.240.netbios-ns 128.165.109.23.netbios-ns:
      3 172.31.3.240.netbios-ns 128.165.88.40.netbios-ns:
      3 172.31.3.240.netbios-ns 128.165.56.54.netbios-ns:
      3 172.22.45.55.netbios-ns 128.165.173.253.netbios-ns:
      3 172.22.45.55.netbios-ns 128.165.96.201.netbios-ns:
      3 172.22.45.55.netbios-ns 128.165.190.60.netbios-ns:
      3 172.22.45.55.netbios-ns 128.165.131.94.netbios-ns:
      3 172.22.45.55.netbios-ns 128.165.109.23.netbios-ns:
      3 172.22.45.55.netbios-ns 128.165.88.40.netbios-ns:
      3 172.22.45.55.netbios-ns 128.165.56.54.netbios-ns:
      3 192.168.5.1.netbios-ns pc-sargent.anlw.anl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns pc-rpowell.anlw.anl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns pc-french.anlw.anl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns WARRIOR.SLAC.Stanford.EDU.netbios-ns:
      3 192.168.5.1.netbios-ns pc-smout.anlw.anl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns cmartinpc.ops.anl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns nngdhcp03.nn.doe.gov.netbios-ns:
      3 192.168.5.1.netbios-ns krlclll.mst.lanl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns sscramirez.llnl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns nn-nov50.nn.doe.gov.netbios-ns:
      3 192.168.5.1.netbios-ns macendrese.llnl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns shorthair.lanl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns negtn01.ne.doe.gov.netbios-ns:
      3 192.168.5.1.netbios-ns vdunlop.llnl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns noble.nn.doe.gov.netbios-ns:
      3 192.168.5.1.netbios-ns bnlinfo1.bnl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns www3.dp.doe.gov.netbios-ns:
      3 192.168.5.1.netbios-ns wwhite.llnl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns wv01055.pnl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns wd19484.pnl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns tas.dne.bnl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns smokey.llnl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns isvan3.orau.gov.netbios-ns:
      3 192.168.5.1.netbios-ns WV00367.pnl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns 128.115.114.249.netbios-ns:
      3 192.168.5.1.netbios-ns 128.115.114.124.netbios-ns:
      3 192.168.5.1.netbios-ns suntid.bnl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns sscsj.llnl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns sscml.llnl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns grant.llnl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns 192.188.34.102.netbios-ns:
      3 192.168.5.1.netbios-ns 192.131.121.10.netbios-ns:
      3 192.168.5.1.netbios-ns 146.139.254.81.netbios-ns:
      3 192.168.5.1.netbios-ns 128.165.95.187.netbios-ns:
      3 192.168.5.1.netbios-ns 128.165.90.111.netbios-ns:
      3 192.168.5.1.netbios-ns 128.165.71.161.netbios-ns:
      3 192.168.5.1.netbios-ns 128.165.71.110.netbios-ns:
      3 192.168.5.1.netbios-ns 128.165.66.163.netbios-ns:
      3 192.168.5.1.netbios-ns dns2.anl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns w4.lanl.gov.netbios-ns:
      3 192.168.5.1.netbios-ns fw.orau.gov.netbios-ns:
      3 192.168.2.2.netbios-ns 192.16.11.163.netbios-ns:
      3 192.168.1.5.netbios-ns 128.165.52.122.netbios-ns:
      3 192.168.1.5.netbios-ns 128.165.128.71.netbios-ns:
      3 192.168.1.2.netbios-ns 192.16.25.193.netbios-ns:
      3 192.168.0.1.netbios-ns lata-lao-pc2.lanl.gov.netbios-ns:
      3 172.25.17.4.netbios-ns 128.165.90.17.netbios-ns:
      3 172.16.35.3.netbios-ns www-emtd.lanl.gov.netbios-ns:
      3 172.16.35.3.netbios-ns ns1.lanl.gov.netbios-ns:
      3 172.16.3.10.netbios-ns 128.165.78.18.netbios-ns:
      3 10.12.27.82.netbios-ns 128.165.48.16.netbios-ns:
      3 10.12.27.80.netbios-ns 128.165.131.101.netbios-ns:
      3 10.12.27.65.netbios-ns 128.165.78.18.netbios-ns:
      3 10.12.27.56.netbios-ns 192.16.6.68.netbios-ns:
      3 10.12.27.49.netbios-ns 128.165.68.144.netbios-ns:
      3 10.12.27.13.netbios-ns 128.165.191.201.netbios-ns:
      3 10.12.27.13.netbios-ns 128.165.124.109.netbios-ns:
      3 10.12.27.13.netbios-ns 128.165.95.200.netbios-ns:
      3 10.12.27.13.netbios-ns 128.165.122.19.netbios-ns:
      3 10.12.27.13.netbios-ns 128.165.95.87.netbios-ns:
      3 10.10.10.35.netbios-ns 128.165.84.213.netbios-ns:
      3 10.10.10.35.netbios-ns 128.165.52.122.netbios-ns:
      3 10.10.10.35.netbios-ns 192.12.184.47.netbios-ns:
      3 10.10.10.35.netbios-ns 128.165.29.13.netbios-ns:
      3 10.3.1.125.netbios-ns 128.165.71.162.netbios-ns:
      3 10.3.1.124.netbios-ns 128.165.108.197.netbios-ns:
      3 10.3.1.124.netbios-ns 128.165.92.114.netbios-ns:
      3 10.3.1.121.netbios-ns 128.165.92.114.netbios-ns:
      3 10.3.1.121.netbios-ns 128.165.66.69.netbios-ns:
      3 10.3.1.120.netbios-ns 128.165.95.200.netbios-ns:
      3 10.3.1.120.netbios-ns 128.165.71.162.netbios-ns:
      3 10.1.1.1.netbios-ns 128.165.205.180.netbios-ns:
      3 10.1.1.1.netbios-ns 128.165.139.239.netbios-ns:
      3 10.1.1.1.netbios-ns 128.165.96.201.netbios-ns:
      3 10.1.1.1.netbios-ns 128.165.95.214.netbios-ns:
      3 10.1.1.1.netbios-ns 128.165.84.179.netbios-ns:
      3 10.1.1.1.netbios-ns 128.165.71.220.netbios-ns:
      3 10.1.1.1.netbios-ns 128.165.65.125.netbios-ns:
      3 10.1.1.1.netbios-ns 128.165.61.136.netbios-ns:
      3 10.1.1.1.netbios-ns 128.165.235.63.netbios-ns:
      3 10.1.1.1.netbios-ns 128.165.165.75.netbios-ns:
      3 10.1.1.1.netbios-ns 128.165.38.76.netbios-ns:
      3 10.1.1.1.netbios-ns 128.165.33.12.netbios-ns:
      3 ns2.lanl.gov.1917 192.168.1.1.domain:
      3 192.168.4.56.1025 128.165.102.6.netbios-ssn:
      3 192.168.1.1.1682 bang.lanl.gov.www:
      3 192.168.1.1.1074 mailman.lanl.gov.smtp:
      2 192.168.125.102.netbios-ns 128.165.71.12.netbios-ns:
      2 192.168.34.99.netbios-ns w4.lanl.gov.netbios-ns:
      2 192.168.115.2.netbios-ns transitory55.lanl.gov.netbios-ns:
      2 192.168.115.2.netbios-ns slip54.slip.anl.gov.netbios-ns:
      2 192.168.115.2.netbios-ns nemeth2.sep.bnl.gov.netbios-ns:
      2 192.168.115.2.netbios-ns jcoleman.lanl.gov.netbios-ns:
      2 192.168.115.2.netbios-ns dhcp_45.osti.gov.netbios-ns:
      2 192.168.115.2.netbios-ns tl_cadd.pnl.gov.netbios-ns:
      2 192.168.115.2.netbios-ns 192.131.121.10.netbios-ns:
      2 192.168.115.2.netbios-ns 128.165.203.85.netbios-ns:
      2 10.64.100.224.netbios-ns mailhost.lanl.gov.netbios-ns:
      2 172.31.3.240.netbios-ns 128.165.173.195.netbios-ns:
      2 172.22.45.55.netbios-ns 128.165.173.195.netbios-ns:
      2 192.168.5.1.netbios-ns transitory55.lanl.gov.netbios-ns:
      2 192.168.5.1.netbios-ns slip54.slip.anl.gov.netbios-ns:
      2 192.168.5.1.netbios-ns nemeth2.sep.bnl.gov.netbios-ns:
      2 192.168.5.1.netbios-ns dschneider.lanl.gov.netbios-ns:
      2 192.168.5.1.netbios-ns ryker.eh.doe.gov.netbios-ns:
      2 192.168.5.1.netbios-ns dhcp_45.osti.gov.netbios-ns:
      2 192.168.5.1.netbios-ns atorres.llnl.gov.netbios-ns:
      2 192.168.5.1.netbios-ns tl_cadd.pnl.gov.netbios-ns:
      2 192.168.5.1.netbios-ns 128.165.203.85.netbios-ns:
      2 192.168.5.1.netbios-ns 128.165.71.61.netbios-ns:
      2 192.168.5.1.netbios-ns 128.165.31.71.netbios-ns:
      2 192.168.5.1.netbios-ns 128.165.31.66.netbios-ns:
      2 192.168.1.1.netbios-ns 192.16.20.118.netbios-ns:
      2 172.16.35.3.netbios-ns sst10a.lanl.gov.netbios-ns:
      2 10.3.1.121.netbios-ns 128.165.174.192.netbios-ns:
      2 192.168.1.1.1674 bang.lanl.gov.www:
      1 192.168.115.2.netbios-ns dschneider.lanl.gov.netbios-ns:
      1 192.168.115.2.netbios-ns darkside.llnl.gov.netbios-ns:
      1 192.168.115.2.netbios-ns ryker.eh.doe.gov.netbios-ns:
      1 192.168.115.2.netbios-ns atorres.llnl.gov.netbios-ns:
      1 192.168.115.2.netbios-ns parpc.lanl.gov.netbios-ns:
      1 192.168.115.2.netbios-ns 128.165.71.61.netbios-ns:
      1 192.168.5.1.netbios-ns darkside.llnl.gov.netbios-ns:
      1 192.168.5.1.netbios-ns parpc.lanl.gov.netbios-ns:
      1 192.168.1.4.netbios-ns 128.165.191.5.netbios-ns:
      1 10.12.31.60.netbios-ns 128.165.99.148.netbios-ns:
      1 10.12.27.82.netbios-ns 128.165.98.60.netbios-ns:
      1 10.0.0.253.netbios-ns 128.165.95.85.netbios-ns:
      1 192.168.1.1.1833 bang.lanl.gov.www:
      1 192.168.1.1 xxx.lanl.gov:

I agree that we have those soals out there that are trying to test things.
We've had our share as well. As a result I added filters to our off
campus links only to find out that we have remote users and researchers
that HAVE to get back to their NT, etc domains, using netbios over IP.
The latest example was some guy that spent 12 weeks on a Navy ship and
used their satellite link to get back to his univeristy NT domain. Of
course that was before the filters went in. Now I have to add permit
lines so legitimate users can get their work done. sheesh.

ted

Phil Wood wrote:

I was not offended. The majority of garbage traffic directed at
us appears to be coming from MS things (for want of a better name).
I guess you could equate the MS thing to a typewriter and the person
that is using it to a monkey. Hmmm, MS == MonkeyShines*.

  * mon.key.shine \'m*n-ke--.shi-n\ n : a mischievous trick : PRANK

The table below shows some of the Monkeyshines I've seen (Jan 1 - Jan 11).
The biggy, 172.29.16.32 was traced to somewhere in Alternet. (I'm expecting
some resolution on that one any month now). All source addresses are
flowing from beyond our boarders and directed to real and/or imagined
hosts on our network. Our router filters these bogus things out. It
would be nice to track them all down and help the poor souls who are
just trying to get some work done.

Maybe some of you operators could stop it before it travels halfway around
the world to our site.

  Count Source Destination

  73663 172.29.16.32.netbios-ns 192.16.16.32.netbios-ns:

Much stuff deleted.