Afternoon all,
I'm working on getting Wireshark certified, and wouldn't you know it, I've already found a thing or two on my network that concerns me. After viewing the capture data on my local box, I found an entry that reads:
"85 Source port: menandmice-noh Destination port: tbrpf"
After doing some research, I found that "menandmice_noh" is "Men & Mice Remote Control". All I have gotten from Google besides that is that Men & Mice is an IP Address Management Suite. We have our own DNS and DHCP servers, and I have never seen any of this Men & Mice stuff before today. Any thoughts on what it could be? The fact that it is a remote control entry raises an alarm for me.