|
Nyt vaan mietityttää että mitä kaikkea nuo ohjelmat sitten ovat, joita muuri kysyy. Toki virustorjunta ym:t sallin mutta kun en tiedä tarkalleen mitä kaikki muut ovat... mm. LSA Shell(export version), generic host process for win32 services, NDIS user mode I/O driver, application layer gateway serice. Näistä en ole täysin varma.
Esimerkki josta en ole varma:
Generic Host Process for Win32 Services (svchost.exe) is being contacted from a remote machine [84.248.171.205] using local port 135 (EPMAP-location service - Dynamically assign ports for RPC)
Do u want to allow this program to access network.
File Version : 5.1.2600.2180
File Description : Generic Host Process for Win32 Services (svchost.exe)
File Path : C:\WINDOWS\system32\svchost.exe
Process ID : 0x374 (Heximal) 884 (Decimal)
Connection origin : remote initiated
Protocol : TCP
Local Address : 84.248.184.236
Local Port : 135 (EPMAP - Location service - Dynamically assign ports for RPC)
Remote Name :
Remote Address : 84.248.171.205
Remote Port : 1294
Ethernet packet details:
Ethernet II (Packet Length: 62)
Destination: 00-04-ed-0b-46-fa
Source: 00-12-80-27-72-18
Type: IP (0x0800)
Internet Protocol
Version: 4
Header Length: 20 bytes
Flags:
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset:0
Time to live: 127
Protocol: 0x6 (TCP - Transmission Control Protocol)
Header checksum: 0x9656 (Correct)
Source: 84.248.171.205
Destination: 84.248.184.236
Transmission Control Protocol (TCP)
Source port: 1294
Destination port: 135
Sequence number: 2793765381
Acknowledgment number: 0
Header length: 28
Flags:
0... .... = Congestion Window Reduce (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Checksum: 0x6453 (Correct)
Data (0 Bytes)
Binary dump of the packet:
0000: 00 04 ED 0B 46 FA 00 12 : 80 27 72 18 08 00 45 00 | ....F....'r...E.
0010: 00 30 96 87 40 00 7F 06 : 56 96 54 F8 AB CD 54 F8 | .0..@...V.T...T.
0020: B8 EC 05 0E 00 87 A6 85 : 7A 05 00 00 00 00 70 02 | ........z.....p.
0030: FA F0 53 64 00 00 02 04 : 05 B4 01 01 04 02 | ..Sd..........
Ken muistaa, minä en.
Viestiä on muokattu lähettämisen jälkeen. Viimeisin muokkaus 17. huhtikuuta 2005 @ 09:18
|
