Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

On two Windows 7 machines in my LAN I have Symantec Endpoint Protection 12.1 installed. Things work fine, but several time per day I get to see the following warning:

portscan

I had a thorough look at the machine that is running on 192.168.1.111, but I am quite sure there is no malicious software on there. What could be triggering this alarm? The only thing I can think of is utorrent local peer discovery, although I that is not exactly a "port scan".

share|improve this question
    
Is 192.168.1.111 a Windows machinge –  hydroparadise Aug 17 '12 at 20:00
add comment

1 Answer

up vote 0 down vote accepted

A great tool that might help your situation is Wire Shark. This will let you see exactly whats going on in your network to see what might be hitting those machines and if it trully is a port scan.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.