Neb:

If you look at them carefully they all look for something more specific that a simple NetBIOS connection. It's either administrative share access, viruses accessing shares and transferring themselves or whatever.

It really wouldn't help to be logging every transaction of this type on a larger network.... The alerts would be horrendous.