Re: DoS Syn_sent problem - "bootpc" starts it
From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 08/25/04
- Next message: anonymous_at_discussions.microsoft.com: "SP 2"
- Previous message: Mark Swift [MSFT]: "Re: Windows XP IPSec client with 3rd party CSP"
- In reply to: dag_adamson: "DoS Syn_sent problem - "bootpc" starts it"
- Next in thread: dag_adamson: "Re: DoS Syn_sent problem - "bootpc" starts it"
- Reply: dag_adamson: "Re: DoS Syn_sent problem - "bootpc" starts it"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 24 Aug 2004 18:07:15 -0400
Put an analysis tool like Ethereal on the LAN and capture packets.
Dave
"dag_adamson" <dag_adamson@yahoo.com> wrote in message
news:7fff0d01.0408240603.369ef1f6@posting.google.com...
| Hello-
|
| I have been watching the different discussion groups and it appears
| that several folks have been having issue with DoS issues.
|
| CONFIG:
| I have a Dell Inspiron 2650 laptop with a PCMCIA wireless LAN card
| with XP with SP1 all the security patches have been downloaded. I
| have used pest patrol, Adaware, HiJackThis and Norton to remove
| anything I can find.
|
| SYMPTOMS:
| I noticed a problem with my PC 4 days ago when I was seemingly unable
| to hibernate my system.
|
| While observing "netstat -an" I noticed probably 100 "SYN_SENT".
|
| WHen I pull the PCMCIA wireless card from the system - I can shutdown
| and hibernate the system.
|
| Further analysis has indicated that the system is first connecting to
| a server (this is the same server everytime) it is off of our network
| once it gets ESTABLISH (I have contacted the owner of the server) - it
| starts randomly starting out searching for IPs in my segment
| 192.168.0.0 and then occassionally ESTABLISH
|
| It appears that when I plug the card in and watch "netstat -a" the
| first step occurs called "bootpc" --- then all hell breaks loose
|
| THEORIES:
| BootPC begin the loading of interfaces and protocols etc. Is it
| possible to go to a place in the registry or elsewhere to identify
| what is being loading?
|
| Any help would be appreciated - please post and email
|
| Thanks
| Dag
- Next message: anonymous_at_discussions.microsoft.com: "SP 2"
- Previous message: Mark Swift [MSFT]: "Re: Windows XP IPSec client with 3rd party CSP"
- In reply to: dag_adamson: "DoS Syn_sent problem - "bootpc" starts it"
- Next in thread: dag_adamson: "Re: DoS Syn_sent problem - "bootpc" starts it"
- Reply: dag_adamson: "Re: DoS Syn_sent problem - "bootpc" starts it"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|