How to determine which processes are sending CLDAP Protocol to DST Port 389

edit

Hello ,

I have a number of servers sending LDPA queries to a domain controller ( servers was mounted in an envirement with another envirement templates after unjoin and join to new domain) , when i Try to snif the traffic from one server using wireshark,i found that queries sent to destination with CLDAP and TCP Protocoles . How to determine with apps are involved and any information related to this issue

Thank You