Page 1 of 1

Ask since 192.168.56.1 to my network

Posted: 11. Feb 2014, 17:36
by Maitane
Hi,

anybody know what happend?

I noticed unusual network traffic from my desktop, which runs on Windows Server 2003 R2 standar. About every 15 minutes the source ip 192.168.56.1 sends NetBios traffic and ntp to servers in my LAN.
Because the server is not on this subnet, it uses the default gateway. The router blocks the traffic and it shows up in my reports.

Some of the traffic is on udp port 137 and other 123. An internet search that 192.168.56.1 is the default router for VirtualBox, I would like to know why the virtualBox
is sending this ask to my servers. I wonder if this is normal or a problem with my installation. How could I stop these requests VirtualBox?

Thanks in advance

Re: Ask since 192.168.56.1 to my network

Posted: 11. Feb 2014, 17:42
by mpack
That would appear to be a guest communicating on the host-only network. 192.168.56.1 is the first address served up the host-only DHCP server.

Re: Ask since 192.168.56.1 to my network

Posted: 11. Feb 2014, 18:00
by Maitane
how to get my server to stop trying to talk to it.

Re: Ask since 192.168.56.1 to my network

Posted: 11. Feb 2014, 18:06
by mpack
Sorry, I'm not a networking expert.

Re: Ask since 192.168.56.1 to my network

Posted: 11. Feb 2014, 18:12
by Maitane
thanks,

But I don“t understand why this virtualbox is sending some traffic on port 137 and 123 to my network.

Re: Ask since 192.168.56.1 to my network

Posted: 12. Feb 2014, 00:18
by BillG
192.168.56.1 is the host adapter on the vm host. If you have a Windows vm guest on the host-only network, it will send broadcasts on the 192.168.56 network and these will be received by the host.

If you do not have a guest using the host only adapter, simply disable the interface on the host.