we have a windows 2003 r2 64 bit server and monitored by logic monitor ( snmp monitor)
logic monitor is reporting that the server is receiving many udp packet on non listening ports
i have install wireshark on the server
i have created a query "udp && ip.dst==192.168.49.67" which is showing me all the packets which are udp and have destination ip as my server ips.
Please let me know if i am on right direction , if so how can i progress it further.