I'm new to wireshark. (installed it today)
I'm just looking at the traffic and noticed this kind of packages:
60261 microsoft-ds [syn] seq=0 Win=8192 Len=0 MSS=1460 SACK_PERM=1
its sent to ip: 18.104.22.168 port: 445
I tried googling the line (and parts of it) and the it address - wasn't a great help. anybody knows what that is?