Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations wOOdy-Soft on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Recent content by mattmsudawg
-
Which PCs dont have updates
If you double-click on those numbers it will give you a listing for that particular category.- mattmsudawg
- Post #4
- Forum: Security, hacker detection & forensics
-
Strange traffic on port 139
We ended up finding what was causing it. It was a logging appliance contacting all the servers. We ended up disabling netbios on the logging appliance. Thanks for all the help!!- mattmsudawg
- Post #10
- Forum: Security, hacker detection & forensics
-
Strange traffic on port 139
The traffic is not constant in the sense of continuous streaming traffic. But there is no consistant pattern either.- mattmsudawg
- Post #7
- Forum: Security, hacker detection & forensics
-
Strange traffic on port 139
We don't have anybody remotely connecting into our network so it couldn't be that. If I run a traceroute it get's to the last hop in our network and then dies. We're also not seeing anything coming back into our network from that ip address ... just traffic going out.- mattmsudawg
- Post #5
- Forum: Security, hacker detection & forensics
-
Strange traffic on port 139
Nothing internal. All of our ip's are 172.19.x.x. And what's strange is that it's only originating from the servers ... no workstations.- mattmsudawg
- Post #3
- Forum: Security, hacker detection & forensics
-
Strange traffic on port 139
We are seeing traffic going outbound on port 139 (nbsession) to the private ip address 10.4.0.1. The traffic is only coming from our servers. We've run a full virus scan and used the rootkit revealer from sysinternals and have found nothing. I'm just looking for some ideas of what this could...- mattmsudawg
- Thread
- Replies: 9
- Forum: Security, hacker detection & forensics
-
Setting up Epolicy Orchestrator Server
Might want to try the McAfee forum. You would probably get mor response there.- mattmsudawg
- Post #2
- Forum: Information Security Group
-
Enterprise antivirus managability
I can't believe you've used McAfee or ePolicy and say it sucks. I use it and I can't find anything that will match it. How long ago has it been since you used McAfee's management console? You might want to check out the beta version of ePolicy 3.6.- mattmsudawg
- Post #4
- Forum: Virus/Spyware discussion
-
password problem with FM Pro7
EDIT: Should read "try a different forum".- mattmsudawg
- Post #3
- Forum: Security, hacker detection & forensics
-
password problem with FM Pro7
Might want to try and diffent forum as this one is for McAfee related products.- mattmsudawg
- Post #2
- Forum: Security, hacker detection & forensics
-
After Uninstalling EPO agent, workstation continues to talk to EPO
You need to modify that machines siteStat.xml to look to McAfee first.- mattmsudawg
- Post #2
- Forum: Security, hacker detection & forensics
-
How do you change the password for Virus Scan in EPO?
Well if you are able to log into ePo then you can change the admin password by going to the users tab on the main page. You shouldn't have to create a new admin acct. As for the workstations with VS 8.0, the method in the 2nd post should be followed. That will set the password needed to...- mattmsudawg
- Post #4
- Forum: Security, hacker detection & forensics
-
-
Download Epo 3.5
Then it may not give you access to ePo. I would suggest calling McAfee and seeing what products the grant number includes.- mattmsudawg
- Post #8
- Forum: Security, hacker detection & forensics
-
Download Epo 3.5
Protection Pilot I believe is a watered-down version of ePo. Like VictorySabre said, your grant number may have expired or doesn't give you access to ePo.- mattmsudawg
- Post #6
- Forum: Security, hacker detection & forensics
