About a month ago we migrated out CiscoWorks server to VMware. Ever since we have had a significant amount of broadcast traffic coming from the server. We have noticed this as it is stopped by our firewall.
This traffic is broadcast on UDP port 44342 and 42342
There is also broadcast traffic to the subnet of the server on UDP port 137
From nbstat I can see that this traffic is coming from Internetwork Performance Monitor.
The traffic follows an interesting pattern in that for about 3 days after the server is rebooted it appears constantly then stops completely. After the next reboot the traffic appears again.
Is there anything that can be done to stop this traffic without stopping IPM from working?