NetBiosSession
Results 1 to 8 of 8

Thread: NetBiosSession

  1. #1
    AntiOnline Senior Medicine Man
    Join Date
    Nov 2001
    Posts
    724

    NetBiosSession

    Net Bios is a services that runs on port 139.I have seen it many times, when port scanning.
    However, I have never been able to interact with this service,using a telnet/hyperterminal.

    Questions: Do I need a client designed for NetBios sessions? Where can I find it?

    Am I just not using the correct term type? What is the Term Type, how can I find it?

    What programs are used with this service/port.....Netmeeting, ISP connection, ect... ???

    This port often shows open on my local machine at home, should I be concerned about a security hole?

    I am sorry if these are pretty vauge questions, but this is literally all I know about this peticular service. Any and all info would help me come to a better understanding of all of this.
    It is better to be HATED for who you are, than LOVED for who you are NOT.

    THC/IP Version 4.2

  2. #2
    Hi mom!
    Join Date
    Aug 2001
    Posts
    1,103
    NetBIOS is a communications protocol, primairally used by windows clients to communicate amongst themselves - sharing drives or folders between windows machines is a common application for NetBIOS. If you want to make use of it through Linux you can use Samba, it can use the same protocol.

    Lots of information here: http://www.webopedia.com/TERM/N/NetBIOS.html
    I wish to express my gratitude to the people of Italy. Thank you for inventing pizza.

  3. #3
    Senior Member
    Join Date
    Sep 2001
    Posts
    429
    more info on NetBIOS & NetBEUI can be found here

    For full info and details go here

    That should get you started



    J.

  4. #4
    AntiOnline Senior Member souleman's Avatar
    Join Date
    Oct 2001
    Location
    Flint, MI
    Posts
    2,884
    NetBios (ports 138 and 139) are used by MS products originally. It is the port which runs SMB, the messaging protocol that allows Network Neighborhood to show all the computers on your network. If you are on a linux box, Samba will run SMB also. You can't interact wth it with telnet/hyperterm, because it doesn't run TCP/IP, it runs SMB.

    You can disable the port by turning off SMB in your network settings, but then you won't have the ease of use an a home network (if you are running one). If you don't have a network, turn off the port. There is no need to have any ports running that you are not using, because any open port is an entry way into your computer.
    \"Ignorance is bliss....
    but only for your enemy\"
    -- souleman

  5. #5
    Senior Member
    Join Date
    Jan 2002
    Posts
    458
    as far as my information guide me, that the Net BIOS is a network protocol for windows.
    and if u donít have a NIC on ur machine , so it's not important.
    but it's considered as a UDP with a very lousy security
    When the power of Love overcomes the Love of power, the world will know peace... Jimi Hendrix
    -------------------------------------------------------------
    I dream of giving birth to a child who will ask...... what was war?

  6. #6
    Top Gun Maverick811's Avatar
    Join Date
    Oct 2001
    Posts
    852
    To further add to the information already given in this post, NetBIOS is huge security hole if not set up properly. If misconfigured, a machine running NetBIOS can leave itself wide open to anyone on the outside, giving full access to the drives on the exposed machine - I also view exploiting NetBIOS as one of the easiest 'hacks' anyone could do because of it's simplicity and how many users machines are exposed without their knowledge. Now I won't mention how these exploits work, but I will mention that some possible methods to help discourage this exploit are: passwording any shared drives or folders on your machine, running a hardware/software firewall that blocks access to port 139 from the outside, or turning off File sharing if a computer is not on a network.

    Hope this helps...
    - Maverick

  7. #7
    Senior Member
    Join Date
    Jan 2002
    Posts
    458
    for good info. about anything for Net BIOS and others try this man .

    http://www.itpapers.com/index.html

    enjoy.
    When the power of Love overcomes the Love of power, the world will know peace... Jimi Hendrix
    -------------------------------------------------------------
    I dream of giving birth to a child who will ask...... what was war?

  8. #8
    AntiOnline Senior Medicine Man
    Join Date
    Nov 2001
    Posts
    724
    Thanx for all the info guys. THis is what i have gathered.
    NetBios= Windows networking/Filesharing. Protocal=SMB: ?Messenging Protocal?
    Big ass security hole if you dont need it/know about it.

    I need to disable it on my pc.
    What network settings do I go to? Start>Settings>Control Panel>Network?
    Or somewhere else?
    It is better to be HATED for who you are, than LOVED for who you are NOT.

    THC/IP Version 4.2

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •