Solved

translate captures packets, too Many packets sent

Posted on 2004-04-02
4
225 Views
Last Modified: 2013-12-07
So i got this home network with 4 computers on a switch to a router to a cable modem. One of the computers reads a ridiculous amount of packets sent if you leave it on too long. 21 billion packets sent to 5 thousand received.... So I downloaded ethereal and captured the packets, not really understanding them I need help deciphiring my problem.

What the captured packets boil down to are lots of  NBNS protocol , Refreshes for MSHOME or the computers current name or the user thats logged on (Windows XP), originating from the computer to the DNS server

I've run norton antivirus with the newest update and programs to find adware havent located anything either. Here is a sample

Heres an example packet (I havent figured out how to save as a text file or i would paste the whole thing in here...)

Frame 1 (110 bytes on wire, 110 bytes captured)
Ethernet II, Src: 00:02:a5:a0:3c:6f, Dst: 00:0c:41:ba:c8:5e
Internet Protocol, Src Addr: 192.168.0.101 (192.168.0.101), Dst Addr: 200.212.223.100 (200.212.223.100)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


Any Ideas? If any other information is required, let me know.

Thanx for any help.
0
Comment
Question by:roger_karam
  • 2
  • 2
4 Comments
 
LVL 51

Expert Comment

by:Netman66
ID: 10745696
Hi roger_karam,

Check very carefully the subnet mask and gateway settings on that machine.  It looks to me like the PC is trying to figure out what network it's on.

Barring that, try replacing the NIC - this allows looks like "beaconing".

Regards,

Netman66, MCSE, MCT
Microsoft MVP Team
0
 
LVL 5

Author Comment

by:roger_karam
ID: 10761549
hey netman.

thanx for the response, the thing is that all settings are DHCP and none of the other computers seem to be presenting this problem... could it be that the workgroup is different then the others ? its set at mshome... im changing it now, i'll let you know how that goes.

pardon my ignorance, "beaconing"?

thanx,

RK
0
 
LVL 5

Author Comment

by:roger_karam
ID: 10774964
I tried switching the workgroup but that didnt do much, still getting ridiculous amount of packets sent...  

The address its using is the usual 192.*.*.* with a 255.255.255.0 mask, so i really dont know whats going on. The gateway is set to the router and that doesnt seem to be presenting a problem....

Any clues as to what could be happening?
0
 
LVL 51

Accepted Solution

by:
Netman66 earned 145 total points
ID: 10795040
Try running these:

Adaware - www.lavasoftusa.com

Spybot Search and Destroy - http://download.com.com/3000-2144-10194058.html?tag=lst-0-1

And run an online scan here - www.pestpatrol.com

With PestPatrol you won't be able to repair unless you buy it - I run it at home and am pleased.

Advise.
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

Data center, now-a-days, is referred as the home of all the advanced technologies. In-fact, most of the businesses are now establishing their entire organizational structure around the IT capabilities.
Meet the world's only “Transparent Cloud™” from Superb Internet Corporation. Now, you can experience firsthand a cloud platform that consistently outperforms Amazon Web Services (AWS), IBM’s Softlayer, and Microsoft’s Azure when it comes to CPU and …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now