Wilders Security Forums  

Go Back   Wilders Security Forums > Archived Forums > Closed Sub-Forums > Archive of Ghost Security Forums > Ghost Security Suite (GSS)
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old January 18th, 2008, 07:24 PM
Kegel Kegel is offline
Regular Poster
 
Join Date: Oct 2003
Posts: 157
Default TCPIP

HKEY_LOCAL_MACHINE\System\*controlset*\Services\Tcpip\Parameters\Interfaces**

Recently, I have been getting many requests to access this key by regdefend. I get them every 2 minutes or so and my Logs area in GSS has thousands of entries in it in no time. I used to get these only every once in a while. Seems to be something about obtaining an IP address. Whats going on? Anyone know why they have become so frequent?

The data 2 filed in the GSS LOGS section has entries of t1, t2, leaseterminatestime, ipautoconfigureaddress, addresstype, dhcpretrytime, dhcpretrystatus among others.....
  #2  
Old January 21st, 2008, 05:12 AM
Jason_R0's Avatar
Jason_R0 Jason_R0 is offline
Developer
 
Join Date: Feb 2005
Location: Australia
Posts: 1,038
Default Re: TCPIP

Quote:
Originally Posted by Kegel
HKEY_LOCAL_MACHINE\System\*controlset*\Services\Tcpip\Parameters\Interfaces**

Recently, I have been getting many requests to access this key by regdefend. I get them every 2 minutes or so and my Logs area in GSS has thousands of entries in it in no time. I used to get these only every once in a while. Seems to be something about obtaining an IP address. Whats going on? Anyone know why they have become so frequent?

The data 2 filed in the GSS LOGS section has entries of t1, t2, leaseterminatestime, ipautoconfigureaddress, addresstype, dhcpretrytime, dhcpretrystatus among others.....

I assume it's svchost doing it? Have you installed any new software recently which has something to do with networks?
  #3  
Old January 21st, 2008, 11:18 AM
Kegel Kegel is offline
Regular Poster
 
Join Date: Oct 2003
Posts: 157
Default Re: TCPIP

It is svchost.exe.

Hamachi, but it isnt running. I used to get these same requests in the past, just not so frequently.
  #4  
Old January 21st, 2008, 11:24 AM
Kegel Kegel is offline
Regular Poster
 
Join Date: Oct 2003
Posts: 157
Default Re: TCPIP

Quote:
Originally Posted by Jason_R0
I assume it's svchost doing it? Have you installed any new software recently which has something to do with networks?

Thank You.

It was Hamachi. I uninstalled it and the requests stopped. Much appreciated!

Will it be a potential problem having so many log files populate the log section of GSS? Will it eventually slow my system or anything?

GSS is a great little piece of software. I hope you continue develpment!

Regards
  #5  
Old January 23rd, 2008, 05:00 AM
Jason_R0's Avatar
Jason_R0 Jason_R0 is offline
Developer
 
Join Date: Feb 2005
Location: Australia
Posts: 1,038
Default Re: TCPIP

Quote:
Originally Posted by Kegel
Thank You.

It was Hamachi. I uninstalled it and the requests stopped. Much appreciated!

Will it be a potential problem having so many log files populate the log section of GSS? Will it eventually slow my system or anything?

GSS is a great little piece of software. I hope you continue develpment!

Regards

The current version might get a bit slower the more logs you have in there (if it's in the 10s of thousands), it is something I have improved for the next version. Did you think about possibly allowing HAMACHI (svchost) to access that key without logging?
 

Wilders Security Forums > Archived Forums > Closed Sub-Forums > Archive of Ghost Security Forums > Ghost Security Suite (GSS) « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 06:44 AM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums