Solved

thousands of requests coming from our domain controllers, over port 139

Posted on 2014-02-24
3
97 Views
Last Modified: 2015-01-06
i got an email from our network engineer that there are 2 servers on our network that are probing multiple machines on other networks in our WAN
the 2 servers are active directory domain controllers, and they are sending out requests over port 139
how can i tell what program is running on this machine that is probing port 139 from our DC
0
Comment
Question by:jsctechy
  • 2
3 Comments
 
LVL 8

Expert Comment

by:Shahnawaz Ahmed
ID: 39883679
Dear jsctechy

You can use TCPView by SysInternals (i.e. Microsoft) is a great tool. or I think you may want to try out netstat.exe, which is typically located at C:\WINNT\system32\netstat.exe .

A help page is available with

netstat -?

Examples are:

netstat -a

Lists all local TCP connections and listening ports together with remote TCP endpoint.

netstat -o

Adds the process ID to the output.

netstat -b

Gives you the name of the executable wich was involved in establising this connection/port.
0
 
LVL 8

Accepted Solution

by:
Shahnawaz Ahmed earned 500 total points
ID: 39883685
You will find TCPView more helpful as its GUI and you don't need to install.
You can download from FTP - live.sysinternals.com
0
 
LVL 1

Author Comment

by:jsctechy
ID: 39884163
thanks shahnawaz, tcpview is
SYSTEM PROCESS
PID: 0
TCP
(hostname is the local address)
54039 is one of the local ports
remote address is a hostname of a pc in a different office,
microsoft-ds is one of the remote ports
state is time_wait
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

An article on effective troubleshooting
This article explains the steps required to use the default Photos screensaver to display branding/corporate images
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question