OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Frank Vassalli (Frank.Vassallialltel.com)
Date: Thu Jul 05 2001 - 15:22:40 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Errit,
    What is the OS of your machine? What programs are installed?
    It could be a virus scan program checking with a server for updates. Some use
    UDP packets to do that. It's hard to speculate on other possible causes without
    knowing what apps are on your machine. So what have you got?

    Frank Vassalli

    -----Original Message-----
    From: ejmjmac.dk (Errit Müller) at INTERNET
    Sent: Thursday, July 05, 2001 1:34 PM
    To: Vassalli, Frank L; FOCUS-MSSECURITYFOCUS.COM at INTERNET
    Subject: How to find service?? UDP 138??

    Hi all

    My laptop is behaving very strangely, and I don't know why.
    On some of the servers on the LAN, where my computer has no business, it
    seems like I'm trying to login every night at 0300.
    I have put up a sniffer so I can see that it actually is my pc doing this.
    Now my quistion is.
    How do I see what is causing my computer to start a connection to another pc
    on UDP 138, every night. (when I sleep)
    I have scanned my pc, and installed ZA, so I don't think that any outside
    event is triggering this. I think that some service of some kind is running.
    But how do I locate it?

    Brgds

    Errit Müller