hi all, fyi, netbiosd is part of apple's implementation of windows filesharing. it's a program that runs in the background and handles requests for access to your files if you're sharing them. for some reason, it runs even when you have windows filesharing turned off; i suppose it just answers requests saying something like, "yes, you contacted the windows filesharing server, but there's nothing here to be shared".
here's the story about the random connections people are describing here: out there on the internet, there are plenty of evil and virus-infected zombie botnet computers that go around randomly trying to break in to peoples' computers. one of the most common things they do is look for openly-accessible windows fileshares, so they can go in there and do whatever they like.
most people are behind various routers and firewalls, so their macs never receive these intrusion attempts. but if you are directly connected to the internet, for example if you run PPPoE directly on your Mac, or your router has port-forwarding or dmz set up to allow incoming requests to your machine, you will.
so what people are seeing with little snitch is that every once in a while an evil computer somewhere on the net tries to connect to your windows filesharing. you don't see the incoming connection, because little snitch only deals with outgoing connections. so you only get notified of the outgoing connection of your netbiosd responding to the request for filesharing access. this should be harmless, since the answer is going to be "no way, buddy", if you have windows filesharing turned off.
still, it's probably best not to be communicating with botnet computers at all! so you have various options, you can deny incoming connections to netbiosd in the Mac firewall, you can set up another firewall (try "waterroof" or "icefloor"), you can get a router instead of using PPPoE directly, you can turn off port-forwarding in your router, you can disable the netbiosd altogether. you can find info about all these things by searching, i just wanted to explain what's going on...
