Results 1 to 4 of 4
  1. #1
    Bronze Lounger IanWilson's Avatar
    Join Date
    Dec 2000
    Location
    Bristol, United Kingdom
    Posts
    1,523
    Thanks
    0
    Thanked 1 Time in 1 Post

    New Sygate build - changes?

    I installed the new Sygate Personal Firewall build (free version) and for a few days it behaved much as the previous one had done. Yesterday, my wife, whose laptop is networked with my PC via the router we use for our broadband access, complained that her laptop could no longer access my PC and therefore my printer. A restart seemed to cure that but after that SPF started asking me all over again about programs. Some like Outlook are easy to say yes to.

    I'm not sure about one that it keeps asking me about on logging on which says 'Generic Host Process for Win 32 Services (svchost.exe) is trying to brodacast to [239.255.255.250] using remote port 1900 (SSDP - Simple Service Discovery Protocol). Do you want to allow this program to access the network?'

    I've been saying yes but not ticking the box to remember the answer for next time. What should I do?

    Also, the icon in the system tray (sorry the notification area as I now have to call it) flashes for a brief outgoing burst every 2 seconds or so. On the SPF console you can see outgoing 132B every time. I don't recall this behaviour before. This seems from the SPF console to be to do with the MAC bridge driver, so apparently to do with my home network, but I don't recall seeing this before. Anyone able to shed light for me?

    Ian

  2. #2
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: New Sygate build - changes?

    I wish it were all easier to diagnose...

    Does Sygate show any computer responding to the SSDP request? If the logs are not that detailed, you could try a packet sniffer like Ethereal, but it can take a long time to figure out what all the data means. You could try saying no to the SSDP packet and see if any application reports a problem. Or it might be something your ISP expects to keep your connection alive. Just some random thoughts.

    I think the MAC bridge is used to connect different network interfaces on your computer. I tried some time ago to disable the bridge on Windows XP Pro on a Dell laptop, since I never plan to use the Firewire port for networking, but I never figured out how to do it without disabling everything, because the TCP/IP service was connected to the bridge rather than my network card. You may have the same setup.

  3. #3
    Bronze Lounger IanWilson's Avatar
    Join Date
    Dec 2000
    Location
    Bristol, United Kingdom
    Posts
    1,523
    Thanks
    0
    Thanked 1 Time in 1 Post

    Re: New Sygate build - changes?

    Yes, I think you are right about what the MAC bridge does. That was the way XP set up my networking and I am not keen to change it. I sort of assume that there can be no harm in the regular packets that are going out and it is just continually checking that the network is allive and well.

    With the SSDP packet, I suppose I could try saying no and seeing whether my wife's laptop can no longer access my PC on the netowrk or something. It is hard to know what to make of some of these things, though. I assume that if I have just run a check for spyware and viruses and come up clean then a request like that must be innocent, or is that naive?

    Ian

  4. #4
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: New Sygate build - changes?

    If the trade-off is spending hours tracking down something that no major tool recognizes as spyware, or living with the small risk that it is, taking a bit of risk might be the wiser chioce. <img src=/S/smile.gif border=0 alt=smile width=15 height=15>

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •