Which file-sharing protocols and port ranges are used by Windows file sharing via NetBIOS/SMB?

Study for the SANS560 GIAC Penetration Tester (GPEN) Test. Study with flashcards and multiple choice questions, each question has hints and explanations. Get ready for your exam!

Multiple Choice

Which file-sharing protocols and port ranges are used by Windows file sharing via NetBIOS/SMB?

Explanation:
Windows file sharing uses the SMB protocol, which can run either over NetBIOS or directly over TCP. In NetBIOS-based setups, SMB sessions ride over the NetBIOS session service on port 139 (with NetBIOS name service on 137 and datagram service on 138). More modern Windows networks use SMB directly over TCP/IP on port 445, bypassing NetBIOS. Because of these two paths, Windows file sharing traffic can appear on the NetBIOS/SMB path (139) or on 445. Some materials summarize this as ports 135–139 or 445 to cover both legacy and direct SMB. The other options point to different protocols—NFS (usually 2049), FTP (20/21), and SSH (22)—which are not used for Windows file sharing.

Windows file sharing uses the SMB protocol, which can run either over NetBIOS or directly over TCP. In NetBIOS-based setups, SMB sessions ride over the NetBIOS session service on port 139 (with NetBIOS name service on 137 and datagram service on 138). More modern Windows networks use SMB directly over TCP/IP on port 445, bypassing NetBIOS. Because of these two paths, Windows file sharing traffic can appear on the NetBIOS/SMB path (139) or on 445. Some materials summarize this as ports 135–139 or 445 to cover both legacy and direct SMB. The other options point to different protocols—NFS (usually 2049), FTP (20/21), and SSH (22)—which are not used for Windows file sharing.

More Multiple Choice Questions
Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy