Pinging

[ibredbeard]

Hey,
Not sure if I got the right forum so sorry if I don't. Here's the question:
One of my servers is pinging one specific address every five minutes. I have run anti virus, anti spyware, etc and nothing. Is there a Sniffer that can link the protocols being used, in this case ICMP, to the program using them? Thanks in advance!

 

[jdeisenm]

if your server is windows 2003, check from the command line "netstat" options. I believe you can view an associated process. Not sure about older windows versions

 

[AZeemeri]

Use a sniffer. Put a filter on the specific address and capture the data.
Then you can see what kind of protocol is being used and most likely will figure out what the 'problem' is.

 

[rwullems]

I do not think a Sniffer will help you in this case, ICMP is ICMP, you will need some additional tools to see witch processes are using ICMP locally on the server.

You can find out a lot with process explorer (procexp.exe) from Sysinternals. This shows you witch process is connected to witch process.



_____________________________________
Robert Wullems
Network Specialist
SCP/SCE/SCM/CNX/MCP/MCSA/Network+/CNA