Forum: The Classroom
Topic: tcp question.. nbsession?
started by: aventari
Posted by aventari on May 29 2000,16:21
hey people, i installed a firewall a bit ago, and there's this application "nbsession" that keeps attempting inbound TCP communication.
"WIN32 Network Interface Service Process" is what the description is.
I have a cable modem (roadrunner) but i want to know what the hell it's attempting to do, and you guys i know will give me a straight answer. Should i block this service or what?

------------------
aventari
"witty one-liner"

Posted by simulacrum on May 29 2000,18:14
I've seen the same thing. It's odd. I've noticed that it seems to spawn with certain Windows applications, and depending on the application, if I deny it access, it will crash the application.

I run Win2K, and occasionally when I open Windows Explorer, the services app will try to access the internet. If I deny it, Explorer crashes. Not all Windows apps will crash, though. I still haven't figured it out. Why would Windows Explorer need to access the Internet? Is big brother watching us?

Posted by Kuros on May 30 2000,08:03
rename vnbt.386 to vnbt.sav eliminates nbsession from listening.

nbt.386 is the NetBIOS Transport for TCP/IP. So, unless you plan to use Microsoft
Networking to do file sharing/print sharing over TCP (as opposed to NetBEUI which is what you should use) then renaming is just fine.
have a look at < www.ntsystems.com/db_area/archive/1999/9901/301c3.shtml > for more (I think ??)

[This message has been edited by Kuros (edited May 30, 2000).]

Posted by simulacrum on May 30 2000,08:28
That link doesn't specifically address the issue, outside of saying you should disable your nbsession port 139 on your firewall. The link does provide some good security tips, however.
Posted by aventari on May 31 2000,13:19
thanks Kuros! i'll do that. i just dont want windoze doing things over the network that i dont know about

------------------
aventari
"witty one-liner"

Powered by Ikonboard 3.1.4 © 2006 Ikonboard