Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

On two Windows 7 machines in my LAN I have Symantec Endpoint Protection 12.1 installed. Things work fine, but several time per day I get to see the following warning:


I had a thorough look at the machine that is running on, but I am quite sure there is no malicious software on there. What could be triggering this alarm? The only thing I can think of is utorrent local peer discovery, although I that is not exactly a "port scan".

share|improve this question
Is a Windows machinge – hydroparadise Aug 17 '12 at 20:00
up vote 0 down vote accepted

A great tool that might help your situation is Wire Shark. This will let you see exactly whats going on in your network to see what might be hitting those machines and if it trully is a port scan.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.