IPC$

[GlenJohnson]

I have currently on a W2K server 44 client redirects using IPC$ to a remote IPC. I don't have a clue as to what IPC$ is except I don't like what I'm finding.

http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q162457&

I started monitoring this server because it's the one that's been peeking at 100% cpu, and started wondering if it could be something other than software or hardware. Started wondering about worms and such. Does anybody know what this is? Thanks. Glen A. Johnson
Johnson Computer Consulting
MCP W2K
glen@johnsoncomputers.us



"What really happens is trivial in comparison to what could occur."
Robert von Musil (1880-1942); Austrian author.

 

[brontosaurus]

That's normal. The IPC$ share is needed for SMB access, so if you're users are connecting to normal shares, it will come into play...

 

[GrnEyedLdy]

Glen,

Here's what I found on the IPC share;

"The IPC$ share is used by a client when it needs to send a command to the server. This command can be a request to have the list of the shares available on the server.

This IPC$ share is in fact used to allow the Server to receive what is called a Remote Procedure Call.

The IPC$ share is also associated with what is called a 'named pipe', this is in fact a special channel which interconnect two distant process (one on the client side and one on the server side, for instance). This 'named pipe' carries information regarding one particular task".

Interesting stuff, huh...

Patty

 

[GlenJohnson]

Thanks gang. I was bothered because I was afraid it could have been someone tunneling into the server, causing it to hose up. We're behind a firewall, but I have Zone Alarm on my machine, and I occasionally get hit from outside. Thanks for the help, all I could find was it's used my MS Mail. I did my search on

http://msdn.microsoft.com

for IPC$ and this is where the mail reference comes in. What you've come up with makes sense. Thanks again.

Glen A. Johnson
Johnson Computer Consulting
MCP W2K
glen@johnsoncomputers.us



"What really happens is trivial in comparison to what could occur."
Robert von Musil (1880-1942); Austrian author.