Can you set up a packet capture of some sort (windump, tethereal), with whole frame snaplength (-s 1514), and analyze or post the results?
Stef On 28 Feb 2006 16:31:55 -0000, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > Hello all, > I have a machine that is sending out empty data packets destined to random > ip addresses with a destination port of 137 and 139. All the IP Addresses > seem to be a military and NOC location. I have attached some of the IP's > below. I have ran antivirus, anti-spyware and rootkit detectors > (sysinternals, and f-prot) all came up empty. I had found one other person > on the internet that seemed to have this problem, but no resolution. Any > ideas? <snip>
