I have a situation that is somewhat suspicious. I notice in my router log requests to an outside IP address on UDP port 137 from an XP workstation on my LAN.
The external IP is from a network that I used to log into via Cisco VPN client software (although the IP address of the PIX I used to log into is not the same as the address in my firewall).
I don't see any Cisco related processes running in task manager.
I guess my question is two-fold:
1. How can I track down the process that is generating these requests
2. How can I use netsh to block the requests
Thanks in advance!