http://bugs.winehq.org/show_bug.cgi?id=34556
Bug #: 34556 Summary: wineserver sending SYNs to remote ports 139 and 445 Product: Wine Version: 1.7.1 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: major Priority: P2 Component: wineserver AssignedTo: wine-bugs@winehq.org ReportedBy: ppalloy@gmail.com Classification: Unclassified
Created attachment 46006 --> http://bugs.winehq.org/attachment.cgi?id=46006 screenshot of UbSC history
Ubuntu 13.04 + ppa.launchpad.net/ubuntu-wine/ppa/ubuntu raring main
Since automatic updates via Ubuntu Software Centre to wine on 15 Sept (attached) whenever wineserver is running, it is sending out lots of SYNs to lots of remote IPs on ports 139 and 445.
This ( http://www.davekimble.org.au/problem.wineserver.txt )is the output from sudo netstat -anp | grep tcp done before, during and after wineserver is launched to run Paint Shop Pro v5. It shows the current network connections and their processes. It doesn't matter what .exe is running, or if none is. These packets amount to 56 kbps of outgoing data. It only stops when I kill wineserver.
Since ports 139 and 445 are network folder ports for Samba and Windows File Sharing, this looks like an attempt to connect to unprotected remote network folders.