Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

translate captures packets, too Many packets sent

Posted on 2004-04-02
4
Medium Priority
?
242 Views
Last Modified: 2013-12-07
So i got this home network with 4 computers on a switch to a router to a cable modem. One of the computers reads a ridiculous amount of packets sent if you leave it on too long. 21 billion packets sent to 5 thousand received.... So I downloaded ethereal and captured the packets, not really understanding them I need help deciphiring my problem.

What the captured packets boil down to are lots of  NBNS protocol , Refreshes for MSHOME or the computers current name or the user thats logged on (Windows XP), originating from the computer to the DNS server

I've run norton antivirus with the newest update and programs to find adware havent located anything either. Here is a sample

Heres an example packet (I havent figured out how to save as a text file or i would paste the whole thing in here...)

Frame 1 (110 bytes on wire, 110 bytes captured)
Ethernet II, Src: 00:02:a5:a0:3c:6f, Dst: 00:0c:41:ba:c8:5e
Internet Protocol, Src Addr: 192.168.0.101 (192.168.0.101), Dst Addr: 200.212.223.100 (200.212.223.100)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


Any Ideas? If any other information is required, let me know.

Thanx for any help.
0
Comment
Question by:roger_karam
  • 2
  • 2
4 Comments
 
LVL 51

Expert Comment

by:Netman66
ID: 10745696
Hi roger_karam,

Check very carefully the subnet mask and gateway settings on that machine.  It looks to me like the PC is trying to figure out what network it's on.

Barring that, try replacing the NIC - this allows looks like "beaconing".

Regards,

Netman66, MCSE, MCT
Microsoft MVP Team
0
 
LVL 5

Author Comment

by:roger_karam
ID: 10761549
hey netman.

thanx for the response, the thing is that all settings are DHCP and none of the other computers seem to be presenting this problem... could it be that the workgroup is different then the others ? its set at mshome... im changing it now, i'll let you know how that goes.

pardon my ignorance, "beaconing"?

thanx,

RK
0
 
LVL 5

Author Comment

by:roger_karam
ID: 10774964
I tried switching the workgroup but that didnt do much, still getting ridiculous amount of packets sent...  

The address its using is the usual 192.*.*.* with a 255.255.255.0 mask, so i really dont know whats going on. The gateway is set to the router and that doesnt seem to be presenting a problem....

Any clues as to what could be happening?
0
 
LVL 51

Accepted Solution

by:
Netman66 earned 435 total points
ID: 10795040
Try running these:

Adaware - www.lavasoftusa.com

Spybot Search and Destroy - http://download.com.com/3000-2144-10194058.html?tag=lst-0-1

And run an online scan here - www.pestpatrol.com

With PestPatrol you won't be able to repair unless you buy it - I run it at home and am pleased.

Advise.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Arrow Electronics was searching for a KVM  (Keyboard/Video/Mouse) switch that could display on one single monitor the current status of all units being tested on the rack.
During and after that shift to cloud, one area that still poses a struggle for many organizations is what to do with their department file shares.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question