Win2k8 Web sends requests from UDP 137 to 137 from a LAN IP to an external IP (1S0-7O-84-44).The packets are dropped by an external firewall.Netstat results: UDP 192.168.1.6:137 *:*Can not obtain ownership informationx: Windows Sockets initialization failed: 5 UDP 192.168.1.6:138 *:*Can not obtain ownership informationx: Windows Sockets initialization failed: 5Kind of looks weird.Any ideas?It keeps pounding on that IP every few seconds.

Hi, Generally, UDP port 137 was used by NetBIOS name management traffic. It seems application on your system is trying to find IP address of an external system. Please check your running programs to find the root cause. You can use Clean Boot and Safe Mode with Network (those articles are for Windows XP, but they also apply to Windows Server) to narrow down the cause. Please also try to scan for viruses and malwares to make sure the system is clean. At the same time, please run the MPS report (PFE version) on the server to collect related information for research. The MPS Reporting Tool is utilized to gather detailed information regarding a systems current configuration. The data collected will assist you with fault isolation. A . Please download MPS Reporting Tool (MPSRPT_PFE.EXE) from the following link: (http://www.microsoft.com/downloads/details.aspx?FamilyID=00ad0eac-720f-4441-9ef6-ea9f657b5c2f&DisplayLang=en) Please note: The link may be truncated when you read the E-mail. Be sure to include all text between '(' and ')' when navigating to the download location. B . Right click MPSRPT_PFE.EXE and select Run as Administrator to run this tool, and you will see a Command Window start up. C . Please type Y with the message of <Include the MSINFO32 report? (defaults to Y in 15 seconds)[Y,N]? D . When the tool is done you will see an Explorer Window opening up the %systemroot%\MPSReports\Setup\Reports\cab folder and containing a <Computername>MPSReports.cab file. Send this file to tfwst@microsoft.com for research. Thanks.