Re: Win XP IP address hijack?

From: Dimitry Andric (dim@xs4all.nl)
Date: 12/15/01


Date: Sat, 15 Dec 2001 00:16:09 +0100
From: Dimitry Andric <dim@xs4all.nl>
To: "Burton@SNS" <Burton@SmallNetSolutions.com>


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 2001-12-14 at 23:03:14 Burton@SNS wrote:

BS> Historically for Microsoft's multiple-user operating systems (e.g.
BS> Windows NT and Windows 2K), those messages are in the event log,
BS> not a console alert. Did you check there?

If you are logged in as an administrator, you will definitely get a
console alert, something like the following (on Win2k):

"Windows - System Error : The system has detected an IP address
conflict with another system on the network. Network operations on
this system may be disrupted as a result. More details are available
in the system event log. Consult your network administrator
immediately to resolve the conflict."

And an event log entry is indeed created, both for the above console
alert, and another one from the TCP/IP driver:

"The system detected an address conflict for IP address 192.168.0.1
with the system having network hardware address 12:34:56:78:9A:BC.
Network operations on this system may be disrupted as a result."

Note that this last log entry specifies the hardware address of the
conflicting machine.

Cheers,
- --
Dimitry Andric <dim@xs4all.nl>
PGP Key: http://www.xs4all.nl/~dim/dim.asc
Fingerprint: 7AB462D2CE35FC6D42394FCDB05EA30A2E2096A3
Lbh ner abj va ivbyngvba bs gur QZPN

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5i
Comment: http://www.gn.apc.org/duncan/stoa_cover.htm

iQA/AwUBPBp6MrBeowouIJajEQKNHACeMCEVHxhnPW8vrgX5KWku8Nmk3IsAniWh
xIMyof4vP6zCz72CoJJx6BCQ
=d2Ho
-----END PGP SIGNATURE-----



Relevant Pages

  • Re: crossover utp between winXPhome and win2000pro (off-topic, I know)
    ... windows tends ... >> extra harddrive and rebooted - after that, most network related services ... >> (event log on the winxp tells me registrywriting for current user failed ...
    (microsoft.public.windowsxp.security_admin)
  • Help! All core XP Services fail to start, except two, + UI is crip
    ... I have a basic desktop computer here. ... right-click an item in the Event Log and choose Properties... ... So I went into Network Connections. ... Wrestling with Windows since *before* Jay Leno hosted the debut of Windows ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Userenv 1030 and 1058 errors! Please help me!
    ... For information about network troubleshooting, see Windows Help. ... Windows cannot query for the list of Group Policy objects. ... Check the event log for possible messages previously logged by the policy engine that describes the reason for this. ...
    (microsoft.public.windows.server.general)
  • Failure to Authenticate
    ... When I try to dial in to my new pc and look at the event log, ... The user GSBNT\myusername failed an authentication attempt due to the following reason: The current configuration of the Internet Authentication Service Server only supports local user accounts. ... With my old pc (windows NT on an NT network) I never had any problems. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Windows Updates & 0x800704DD
    ... THAT certainly narrows it down! ... as I'm at the console and can see all resources. ... > user has not logged on to the network. ... >>I have a Windows 2000 Adv Server and when I try to install Windows ...
    (microsoft.public.win2000.advanced_server)