NPF 2002, NAV 2002, up to date. I'll be online (DSL) then NPF will show that a remote system is trying to connect to your computer. I block it, and in details it shows the IP address then 4 more numbers (xxx.xxx.xxx.xxx : xxxx) Is this the port where access is trying to be made? Also can I trace these addresses? Some are different, but at times the same one will show three times in a row (all in a matter of a couple of minutes). Thank you,

To trace ip, use a program like neo trace form neroworx. Or windows can backtrace ips as well, u must do this through the command prompt.

To bactrace IP, go to command prompt and at c:\ type 'tracert xxx.xxx.xxx' without quote. To backtrce the DNS name at c:\ type 'nslookup xxx.xxx.xxx' without quote. If you wanna more detail go to www.samspade.org and do trace from there. xxx.xxx.xxx:yyyy <--- yyyy is the port number of remote system.

Generally speaking,I have got 100's of pings from the same ip in a limited time frame(15min or so).I am always curious as to who is doing all the probing.I have tried several tracing programs and in some cases actually found the end user.This still does not tell you if the end user initiated the alarms(ZA).They may not even know their own computer is scanning others.IMHO if a hacker is wanting to get in,he will.Most other traffic will be blocked by firewall.I think there are lots of port scans, but program still doesnt know you are there,thus generating the alarm.I am certainly no expert,but I think you run a greater risk of damage to your computer that is self inflicted,rather than random internet traffic.I like to think of a firewall as indicator of whats going on behind the scenes.Never hurts to know.

Most of the net traffic is harmless. Just search engines looking for ftp and web servers. Kaaza, morpheous, etc users knock on the weekend. A few Gamers. Common ports are 80,22,21 www,telnet,ftp I see 1214,137,27960,27961,5690,5772,515,111 too. Worry about port scans if your not protected.