Multiple IPC$ entries in 98se Net Watcher.

[jdumont]

this is what I see on a pc running 98se Net Watcher when a w2k pc is browsing Network Neighborhood and looking at the share. Also, there are two entries for the share "C_drive" like so:
ipc$
ipc$
ipc$
ipc$
ipc$
ipc$
ipc$
ipc$
ipc$
C_drive
C_drive

Is this a problem? Thanks

 

[xkjdhdg]

If you aren't part of a network, you won't ever use Net Watcher. In fact, unless you have file sharing enabled, you won't even be able to open it. So are you connected to a network or share your printer?

 

[jdumont]

the 98se pc is a file server of sorts. the dos based pos program is located here and users just map a drive (f to the c_drive. No printer attached. One other win98se pc stores their documents here.

 

[xkjdhdg]

The IPC$ (Inter-Process Communication) share is a standard hidden share on an NT machine which is mainly used for server to server communication. NT machines were designed to connect to each other and obtain different types of necessary information through this share. As with many design features in any operating system, intruders have learned to use this feature for their own purposes. By connecting to this share an intruder has, for all technical purposes, a valid connection to your server. By connecting to this share as null, the intruder has been able to establish this connection without providing it with credentials.

To connect to the IPC$ share as null, an intruder would issue the following command from a command prompt:

c:\>net use \\[ip address of target machine]\ipc$ "" /user:""
Your need to go out on Goggle and looking for links for IPC$
You have security problem.

 

[jdumont]

Win98se? Ya... I'd agree with your "you have security problem" statement.