FreeNAS CIFS send tcp packet to client continuously

[tracker]

Hi all,

I aware my FreeNAS box continuously send tcp packet to my client, those packets are came from FreeNAS port 445 to my client random port (usually using 1600-1900 port range)

I used wireshark to see the traffic, and saw the info is "TCP segment of a reassembled PDU"

I uploaded the packet capture for reference (item 27 - 50)
http://www.cloudshark.org/captures/494577bd0979
FreeNAS : 192.168.100.240
client PC(WIN XP): 192.168.100.81

any solution? thanks

 

[peterh]

shut down the windows machine.

What you see is a conversation where a wintendo machine asks a cifs server for various services.
It's normal behaviour.
The amount however might indicate infection of the wintendo box, better check for this!