OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Free, Bob (RWF4pge.com)
Date: Thu Jul 05 2001 - 17:16:17 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    http://www.sysinternals.com/ntw2k/freeware/tdimon.shtml

    -----Original Message-----
    From: Errit Müller [mailto:ejmjmac.dk]
    Sent: Thursday, July 05, 2001 11:35 AM
    To: Security MS
    Subject: How to find service?? UDP 138??

    Hi all

    My laptop is behaving very strangely, and I don't know why.
    On some of the servers on the LAN, where my computer has no business, it
    seems like I'm trying to login every night at 0300.
    I have put up a sniffer so I can see that it actually is my pc doing this.
    Now my quistion is.
    How do I see what is causing my computer to start a connection to another pc
    on UDP 138, every night. (when I sleep)
    I have scanned my pc, and installed ZA, so I don't think that any outside
    event is triggering this. I think that some service of some kind is running.
    But how do I locate it?

    Brgds

    Errit Müller