as i said in my first post, none of the ips mentioned are actually attached to my network (router does not list them as attached). further, i only use ips 1-20, the ip's in the log are all well above that range. i highly doubt that it is in fact legitimate. once again, the fact that there is no process listed in the log specifying what program sent the packets implies to me again that it is illegitimate.
brokencrow: thanks, ill try it some time
i may give up on this one. i havent had any more problems (nothing in logs). if it starts up again ill start up the investigation again, but i think im set. but if anyone has anymore ideas, let me know.