Outbound from the Client Pc. This is from the firewall log off of the client pc. 172.16.82.175 is the server that is running LanSweeper. We see it is using port 5000 on the client pc. Is this Lansweeper?
2009-01-12 14:11:10 DROP TCP 172.16.82.175 172.20.189.104 1363 5000 48 S 597272002 0 65535 - - - RECEIVE
2009-01-12 14:11:13 DROP TCP 172.16.82.175 172.20.189.104 1363 5000 48 S 597272002 0 65535 - - - RECEIVE
2009-01-12 14:11:19 DROP TCP 172.16.82.175 172.20.189.104 1363 5000 48 S 597272002 0 65535 - - - RECEIVE