We are running Process Explorer on the server and it doesn't show any tracert's running, yet our firewall says that there are a ton of tracert's coming from it.
I am running Process Monitor and filtered tracert, but it didn't find anything, yet our firewall is still seeing tracert traffic coming from the server.
we are finding that we have multiple Windows systems that are running tracert for the same private IP address, and one to a different private IP address. We don't see anything in Task Scheduler to determine what is doing it, but I was hoping someone here might know if there is a tool or some...