Skip to contentSkip to conversation

Question about a blocked packet sent by a windows machine on my lan

DISCUSSION JD 1 participant 1 message Oct 10, 2010

lore
Share & tools
lore

JD

author
#0 lore raw

Our home lan runs through a router/firewall.

I was browsing the router's logs and found this:

INF 2010-10-10T09:46:36-07:00 fw,fwmon src=192.168.1.3 dst=10.64.36.31 ipprot=6 sport=2588 dport=80 Drop traffic to 10.0.0.0/8

The thing is, I have no 10. on my LAN.
My LAN is all 192.168.1.X, (class C).

Why would a windows machine broadcast this packet to http server port ports at all 10.0.0.0/8 machines?

Is it an indication that the windows pc is/might be infected?

Thanks for your help.

JD