Sonicwall detected 105TB/s on port 445

From: Claus Agerskov <ca@xxxxxxxxxxxxxx>
Date: Thu, 14 Dec 2006 09:48:01 +0100

On a Sonicwall PRO2040 it has detected 16777215 TBytes in 44 hours (approx
105TB/s) on port 445 from one single internal ipnumber.

The host is a Microsoft Windows XP which during the log time was updated and
connected to an Samba share on the other side of the firewall.

The firewall is a only connected through 100Mbit (12MB/s) interfaces.

Does anyone know what can have caused the firewall to give these wrong
figures?

Thanks in advance

The most enjoyable greetings
--
Claus Agerskov Electromagnetic Systems Phone: +45 45 25 38 00
Systemadministrator Ørsted * DTU Fax: +45 45 93 16 34
ca@xxxxxxxxxxxxxx Ørsted Plads 348 Web: www.oersted.dtu.dk
+45 45 25 38 44 DK-2800 Lyngby, Denmark Mail: info@xxxxxxxxxxxxxx
.

Prev by Date: Re: Sonicwall newbie question...
Next by Date: Re: Is Kaspersky's Internet Security Good?
Previous by thread: Is it better to imlement a VPN in a Firewall or at the server?
Next by thread: flatten and rebuild---REPLACE!
Index(es):
- Date
- Thread

Relevant Pages

Re: Host Computer with ICS cannot be accessed
... I have the Main (Host) computer with XP SP1 which is the ICS computer on a ... firewall settings, not that I've found so far, but I'll keep looking. ... >>connection, I can check or uncheck the firewall setting to allow others on ... Is there a way I can tell my Host server to allow the Client ...
(microsoft.public.windowsxp.network_web)
Re: Host Computer with ICS cannot be accessed
... I have the Main (Host) computer with XP SP1 which is the ICS computer on a ... firewall settings, not that I've found so far, but I'll keep looking. ... >>connection, I can check or uncheck the firewall setting to allow others on ... Is there a way I can tell my Host server to allow the Client ...
(microsoft.public.windowsxp.network_web)
Re: One computer cant see the other.
... I'm not sure I'm doing this right Steve, but on the command prompt at my host ... command prompt on my host machine and my client machine when I ping the host. ... network of two computers. ... The most likely problem is that a firewall (Norton, McAfee, ZoneAlarm, ...
(microsoft.public.windowsxp.network_web)
RE: [fw-wiz] Vulnerability Response
... >> management effort scales with the number of hosts. ... It scales non-linearly if the problem area is well-defined. ... Now - if you're gonna make a firewall policy for 10,000 desktops ... When someone talks about doing mitigation at the host level, ...
(Firewall-Wizards)
RE: Securing a Local Network
... attacker that has broken into one host to hop among the other hosts. ... If you have a central firewall acting as a choke point, ... computers to go out over non-essential ports, ... > interaction with one of our expert instructors. ...
(Security-Basics)