ndisuio.sys is a system driver used by some firewalls for their data filtering systems.
As a complete guess - it looks to me like your firewall is thinking "I am getting so many of these packets that maybe they are genuine, I'll let a few in and see if any app responds".
I would hope this guess is wrong as it is a very dangerous and stupid thing for a firewall to do.
