translate captures packets, too Many packets sent

So i got this home network with 4 computers on a switch to a router to a cable modem. One of the computers reads a ridiculous amount of packets sent if you leave it on too long. 21 billion packets sent to 5 thousand received.... So I downloaded ethereal and captured the packets, not really understanding them I need help deciphiring my problem.

What the captured packets boil down to are lots of  NBNS protocol , Refreshes for MSHOME or the computers current name or the user thats logged on (Windows XP), originating from the computer to the DNS server

I've run norton antivirus with the newest update and programs to find adware havent located anything either. Here is a sample

Heres an example packet (I havent figured out how to save as a text file or i would paste the whole thing in here...)

Frame 1 (110 bytes on wire, 110 bytes captured)
Ethernet II, Src: 00:02:a5:a0:3c:6f, Dst: 00:0c:41:ba:c8:5e
Internet Protocol, Src Addr: 192.168.0.101 (192.168.0.101), Dst Addr: 200.212.223.100 (200.212.223.100)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


Any Ideas? If any other information is required, let me know.

Thanx for any help.
LVL 5
roger_karamAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
Netman66Connect With a Mentor Commented:
Try running these:

Adaware - www.lavasoftusa.com

Spybot Search and Destroy - http://download.com.com/3000-2144-10194058.html?tag=lst-0-1

And run an online scan here - www.pestpatrol.com

With PestPatrol you won't be able to repair unless you buy it - I run it at home and am pleased.

Advise.
0
 
Netman66Commented:
Hi roger_karam,

Check very carefully the subnet mask and gateway settings on that machine.  It looks to me like the PC is trying to figure out what network it's on.

Barring that, try replacing the NIC - this allows looks like "beaconing".

Regards,

Netman66, MCSE, MCT
Microsoft MVP Team
0
 
roger_karamAuthor Commented:
hey netman.

thanx for the response, the thing is that all settings are DHCP and none of the other computers seem to be presenting this problem... could it be that the workgroup is different then the others ? its set at mshome... im changing it now, i'll let you know how that goes.

pardon my ignorance, "beaconing"?

thanx,

RK
0
 
roger_karamAuthor Commented:
I tried switching the workgroup but that didnt do much, still getting ridiculous amount of packets sent...  

The address its using is the usual 192.*.*.* with a 255.255.255.0 mask, so i really dont know whats going on. The gateway is set to the router and that doesnt seem to be presenting a problem....

Any clues as to what could be happening?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.