I am seeing traffic from my Solarwinds server to various other servers from a process Solarwinds.BusinessLayerHost.exe using TCP port 49155. Does anybody know what this process is and what it does?
It's the process that does different module-specific polling beyond up/down of NPM, for example collecting wireless controller data, pulling ARP and bridge mac data, etc...
Given these are Active Directory high ports...
Do you have SAM installed? or UDT and collecting AD information? do you have any WMI polled nodes?
