So... I think i found the culprit to this situation.

The traffic is being created by Watchguard's "Log Collector Service." As soon as the service is stopped, the NetBios traffic halts. I have opened an issue with them to try and find out why there software is doing this. As well as why there software is making it so hard to determine the origin of the traffic. Being a piece of security software, it should be a little more transparent.



Jon