translate captures packets, too Many packets sent
Posted on 2004-04-02
So i got this home network with 4 computers on a switch to a router to a cable modem. One of the computers reads a ridiculous amount of packets sent if you leave it on too long. 21 billion packets sent to 5 thousand received.... So I downloaded ethereal and captured the packets, not really understanding them I need help deciphiring my problem.
What the captured packets boil down to are lots of NBNS protocol , Refreshes for MSHOME or the computers current name or the user thats logged on (Windows XP), originating from the computer to the DNS server
I've run norton antivirus with the newest update and programs to find adware havent located anything either. Here is a sample
Heres an example packet (I havent figured out how to save as a text file or i would paste the whole thing in here...)
Frame 1 (110 bytes on wire, 110 bytes captured)
Ethernet II, Src: 00:02:a5:a0:3c:6f, Dst: 00:0c:41:ba:c8:5e
Internet Protocol, Src Addr: 192.168.0.101 (192.168.0.101), Dst Addr: 18.104.22.168 (22.214.171.124)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service
Any Ideas? If any other information is required, let me know.
Thanx for any help.