My server is sending DDOS attacks via MSQL to my workstation?

[MichaelD]

This has been going on only for about a week now. Attacks are sporadic. One or two a day, then nothing for a day or so.

Symantec Client Firewall reports that my server (IP xxx.xxx.xxx.xxx and it names my server by hostname)

Attempted Intrusion "MSSQL_Null_Packet_DoS" against your machine was detected and blocked.
Intruder: (serverhostname)(192.168.0.xxx)(445).
Risk Level: Low.
Protocol: TCP.
Attacked IP: (client hostname)(192.168.0.xxx)

Server is running W2K3 Ent
All hosts are running WinXP Pro

My virus defs are up to date. Scans show nothing.

I'm not running a Webserver or anything.
What's going on here?

 

[Thor86]

Originally posted by: MichaelDRisk Level: Low.

I wouldn't worry about it.

 

[MichaelD]

What concerns me is that this is a new problem; never happened before. I've had the same Server/Client setup for about...6 months now.

 

[MichaelD]

Any other opinions/helpful hints/groundbreaking insight?

 

[n0cmonkey]

Spyware? Port 445 is one of the ports used for Microsoft networking over TCP, I think...