nbname & nbdgram inbound access denied

[BehindEnemyLines]

My laptop is DENYING access from various sources with NBNAME (port 137) & NBDGRAM (port 138) along with port 5353. It's appearing pretty much continuously. I have Comodo Firewall and that constant blocking keeps the process System at 100%.

Is this a denial-of-service on the my university wireless network (and wired?)? All the source addresses are local since they're within the university wireless network.

 

[Oakenfold]

Anyone else on the network having the same probes? If there is a commonality you may want to call your IT Helpdesk to provide them the information.

 

[BehindEnemyLines]

This is confirmed from one of my friend's laptop which runs Comodo Firewall as well. His CPU usage spiked also to 100% from the "System" process. It's pretty much the same problems - it's a continuous inbound violations from different local IP addresses. It seems the problem is within the campus network and not some outside work. Disabling the logging brings the CPU load back to normal. I decided to stop collecting after the log file hit 3MB.

Already sent the Chief of Security an email. Hopefully he'll investigate as to what happens.

 

[gsellis]

MS File and Print. What is continuous? 1000 packets per millisecond? 10 packets a second?

If it is 10 packets a second or slower, your firewall software sucks big time.

If it is hundreds per millisecond, distributed attack or infection.