Hi all
I’m browsing through my logs and there’s something in DNS queries logs I don’t understand:
<30>1 2015-06-09T10:23:08+02:00 RT-MAIN-CCR CCR - - - CCR: <eqx.smartadserver.com:A:139=91.103.138.103>
<30>1 2015-06-09T10:23:08+02:00 RT-MAIN-CCR CCR - - - CCR: <eqx.smartadserver.com:A:139=91.103.138.13>
<30>1 2015-06-09T10:44:56+02:00 RT-MAIN-CCR CCR - - - CCR: <www.google.com:A:139=173.194.112.114>
<30>1 2015-06-09T10:44:56+02:00 RT-MAIN-CCR CCR - - - CCR: <www.google.com:A:139=173.194.112.112>
<30>1 2015-06-09T10:44:56+02:00 RT-MAIN-CCR CCR - - - CCR: <www.google.com:A:139=173.194.112.115>
<30>1 2015-06-09T10:44:56+02:00 RT-MAIN-CCR CCR - - - CCR: <www.google.com:A:139=173.194.112.116>
<30>1 2015-06-09T10:44:56+02:00 RT-MAIN-CCR CCR - - - CCR: <www.google.com:A:139=173.194.112.113>
From what I understand, it is a simple DNS query - host asks for “google.com” IP and router gives it to the host. But why is there a Samba (139) port involved? Could someone please explain?
Many thanks in advance.