TCPIP

Discussion in 'Ghost Security Suite (GSS)' started by Kegel, Jan 18, 2008.

Thread Status:
Not open for further replies.
  1. Kegel

    Kegel Registered Member

    Joined:
    Oct 28, 2003
    Posts:
    159
    HKEY_LOCAL_MACHINE\System\*controlset*\Services\Tcpip\Parameters\Interfaces**

    Recently, I have been getting many requests to access this key by regdefend. I get them every 2 minutes or so and my Logs area in GSS has thousands of entries in it in no time. I used to get these only every once in a while. Seems to be something about obtaining an IP address. Whats going on? Anyone know why they have become so frequent?

    The data 2 filed in the GSS LOGS section has entries of t1, t2, leaseterminatestime, ipautoconfigureaddress, addresstype, dhcpretrytime, dhcpretrystatus among others.....
     
  2. Jason_R0

    Jason_R0 Developer

    Joined:
    Feb 16, 2005
    Posts:
    1,038
    Location:
    Australia
    I assume it's svchost doing it? Have you installed any new software recently which has something to do with networks?
     
  3. Kegel

    Kegel Registered Member

    Joined:
    Oct 28, 2003
    Posts:
    159
    It is svchost.exe.

    Hamachi, but it isnt running. I used to get these same requests in the past, just not so frequently.
     
  4. Kegel

    Kegel Registered Member

    Joined:
    Oct 28, 2003
    Posts:
    159
    Thank You.

    It was Hamachi. I uninstalled it and the requests stopped. Much appreciated!

    Will it be a potential problem having so many log files populate the log section of GSS? Will it eventually slow my system or anything?

    GSS is a great little piece of software. I hope you continue develpment!

    Regards
     
  5. Jason_R0

    Jason_R0 Developer

    Joined:
    Feb 16, 2005
    Posts:
    1,038
    Location:
    Australia
    The current version might get a bit slower the more logs you have in there (if it's in the 10s of thousands), it is something I have improved for the next version. Did you think about possibly allowing HAMACHI (svchost) to access that key without logging?
     
Thread Status:
Not open for further replies.