[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: NT hammering my samba netbios?



On  0, Randy Orrison <randy@orrison.com> wrote:
> I've recently added a Windows NT4sp6a box to my home network, configured as
> a PDC and running Microsoft Exchange (don't ask).  Since then, whenever it's
> up, I keep getting the following entries in /var/log/syslog:
> 
> May  1 04:59:23 evo xinetd[606]: START: netbios-ns pid=19288 from=192.168.33.3
> May  1 04:59:23 evo xinetd[606]: START: netbios-ns pid=19289 from=192.168.33.3
> May  1 04:59:23 evo xinetd[606]: START: netbios-ns pid=19290 from=192.168.33.3
> May  1 04:59:23 evo xinetd[606]: Deactivating service netbios-ns due to
> 			excessive incoming connections.  Restarting in 10 seconds.
> May  1 04:59:23 evo xinetd[606]: FAIL: netbios-ns connections per second from=192.168.33.3
> 
> (192.168.33.3 is the NT box.) A few seconds later the netbios-ns service
> restarts, and I get another batch of 10 START messages and it dies again.
> Does anyone have any clue what's going on?
> 
> Actually, it's a bit weirder than that: after the service restarts, the
> next batch of messages say
> 
> May  1 05:00:42 evo xinetd[606]: START: netbios-ns pid=19291 from=192.168.33.1
> 
> where 192.168.33.1 is my linux box!  It appears to be hammering itself.
> 
> This isn't causing any noticable effects, but it's sure filling my log files
> quickly.  Any clues would be helpful, or let me know if you need any further
> information about the Linux or NT configurations.

I think this is caused by your linux box's samba service winning the
election for domain master.  If you don't want this to happen you need
these in /etc/samba/smb.conf:

   os level = 0
   domain master = no
   local master = no
   preferred master = no

Then your NT box can happily win the election.

Tom
-- 
Tom Cook
Information Technology Services, The University of Adelaide

"That you're not paranoid does not mean they're not out to get you."
	- Robert Waldner

Get my GPG public key: https://pinky.its.adelaide.edu.au/~tkcook/tom.cook-at-adelaide.edu.au

Attachment: pgp3dymGQeS8N.pgp
Description: PGP signature


Reply to: