packet was dropped on the ppp interface - a packet to tcp 445 (microsoft-ds), Based on the ttl (yeah, I know they can be changed) of 125 (Windows defaults to 128) it looks like a lousy window's box doing whatever they do on 445. I see this all the time. I wouldn't worry about it if this is the only reason you think you've been hacked. Jeff