Does any one know of a worm or a hack that uses SNMP Broadcast on port 161 on a Windows NT 4 service pack 6a machine? I am picking up about 4 broadcast a minute on the snort logs coming from the NT 4 server. The broadcast is flooding the entire network and have been occuring for about a week and half now. The broadcast address is 255.255.255.255:161 and on the machine, and the SNMP packets originate from ports ranging from 1045-4976, and broadcast in sequential order, but not exactly 1045.1046,1047. It is more like 1045,1051,1066,1101,.. and so forth. Any help would be appreciated.