Are these network connections ok?

Discussion in 'other security issues & news' started by draywal, Mar 17, 2013.

Thread Status:
Not open for further replies.
  1. draywal

    draywal Registered Member

    Joined:
    Mar 17, 2013
    Posts:
    1
    Location:
    usa
    On a home network, there is one wifi mac laptop that is constantly sending events. These show up on the main computer's firewall log as Blocked, most likely due to a rule. I'm not the most experienced in networking, please excuse my ignorance. The wifi router is using encryption. There is another wifi laptop on the network that never shows up in the logs.

    A wifi printer has been setup to connect to the router.

    Here are some logs. The source is the mac.
    All the protocols are UDP except the Type 8s that are ICMP.
    Code:
    mac Source port 631    Destination 192.168.0.255 Destination port 631
    mac Source port 138    Destination 192.168.0.255 Destination port 138
    mac Source port  Type 8    Destination 192.168.0.0 Destination port Type 0
    mac Random Source port    Destination 192.168.0.255 Destination port 137
    The Random Source ports usually range from the 49000s to 65000s

    I found that 631 is printer related. 138 is netbios related.
    My guess is that these are ok? Is there a way to stop all these repeated requests? Also I'm wondering why are they showing up in the main computers firewall log. The destinations ip is not the main computer's ip.
     
  2. xxJackxx

    xxJackxx Registered Member

    Joined:
    Oct 23, 2008
    Posts:
    4,052
    Location:
    USA
    Those are normal and I would not worry about them.
     
Loading...
Thread Status:
Not open for further replies.