Find the Broadcast agent

[Ogobetse]

We have recently moved offices and at the firewall we noticed that there is an obscene amount of traffic to old IP addresses. I've set up a sniff on the firewall port and noticed that all of the traffic is snmp:
ser Datagram Protocol, Src Port: 1042 (1042), Dst Port: snmp (161).

We're an HP shop and are using the dc7600 towers.
The workstations do not have snmp.exe loaded or installed and there (from what i can tell) isn't any HP software setup to work with snmp.

I'm out of ideas to find what's sending these get-requests.

Any help would be appreciated.

Thanks!

 

[gdvissch]

It could be your print server. When using "standard tcp/ip ports" as printer ports, the server uses snmp to detect the state of the printer ...

CU
G.

 

[Ogobetse]

That's exactly what it was... old tcp/ip ports querying the addresses at the other building.

Thanks!