thanks.
I did mean TCP not UDP--I've been looking at these logs all day and my eyes are skware.
The Ip's were different..ie the source and the destination. Destination is my network...not ahome one which gets assigned ip every time we logon via adsl.
135 is RPC port and lots of things can use it DHCP/WINS etc.