Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security ISSForum
[Top] [All Lists]

RE: [ISSForum] Black Ice/RSDP version 7.0 issues with XP SP2

Subject: RE: [ISSForum] Black Ice/RSDP version 7.0 issues with XP SP2
Date: Fri, 24 Dec 2004 08:29:56 +0100
I have got problem with BlackIce 7.0 and WinXP, Microsoft VPN does not work, 
BlackIce kills the session because detect an UDP_Short_header event; even I set 
up it to ignore this event but BlackIce still blocking the connection. This 
problem begins after EBO version. I was told by Microsoft that the UPD packet 
has 8 byte but the last two are ceros  and this is OK for the RFC.

Does any body know how to fix it? 

-----Mensaje original-----
De: issforum-bounces@iss.net [mailto:issforum-bounces@iss.net] En nombre de 
Willard Dawson
Enviado el: miércoles, 22 de diciembre de 2004 16:30
Para: 'Kelly, Chuck'
CC: issforum@iss.net
Asunto: RE: [ISSForum] Black Ice/RSDP version 7.0 issues with XP SP2

Thanks for the notes, Chuck.  I'll be happy to report back to the ISSForum my 
results as well, if the community feels that would be of interest.

--
Willard-----Original Message-----
From: Kelly, Chuck [mailto:chuckk@qualcomm.com]
Sent: Wednesday, December 22, 2004 10:24 AM
To: Willard Dawson
Cc: issforum@iss.net
Subject: RE: [ISSForum] Black Ice/RSDP version 7.0 issues with XP SP2

Willard,

We have seen some strange things post XP SP2 and it has been quite difficult to 
narrow things down. Here is what we know for sure.

1. All issues with RSDP are on Windows XP SP2 hosts. We are running RSDP 7.0EBO 
and 7.0ENO with same symptoms.

2. Regardless if the host is a laptop or desktop, we noticed slow web browsing 
when RSDP is installed.

3. The laptops that are running RSDP are all IBM Thinkpads, T22, T30, T40, and 
T41's. A lot of the laptops seem to have issues with computer freezes. All of 
the sudden they totally lock up and a hard power reset is required to restart 
them. Total loss of keyboard control occurs.

I suspect we are looking at multiple issues. The Thinkpads may have hardware 
issues that SP2 made more prevalent. The slow web browsing may be an SP2 bug 
that RSDP aggravates.

Since we are not getting core dumps or logs of any trouble, it is hard to 
pinpoint.

 



--
Chuck

-----Original Message-----
From: Willard Dawson [mailto:willard.dawson@oit.gatech.edu]
Sent: Wednesday, December 22, 2004 6:51 AM
To: Kelly, Chuck
Subject: RE: [ISSForum] Black Ice/RSDP version 7.0 issues with XP SP2

Hello,

I've had reports of some blue-screen type system crashes after RSDP was 
installed, but I've not been able to get the full report in order to attempt to 
reproduce the problem.  I'm hoping to work more closely with ISS to resolve 
some of these issues, but I'd be interested in learning more about any RSDP 
issues affecting other ISS customers as well.

Willard Dawson
Information Security Manager
OIT, Information Security
Office of Information Technology
Georgia Institute of Technology
258 4th St NW, Atlanta, GA 30332-0700
(404) 385-0334 (office)

-----Original Message-----
From: issforum-bounces@iss.net [mailto:issforum-bounces@iss.net] On Behalf Of 
Kelly, Chuck
Sent: Tuesday, December 21, 2004 5:06 PM
To: issforum@iss.net
Subject: [ISSForum] Black Ice/RSDP version 7.0 issues with XP SP2

We are seeing a lot of issues with RSDP running on Windows XP SP2 laptops.

Mostly system freezes and web browsing slowness.

Anyone else have 7.0 deployed in an SP2 environment that is seeing issues?


--
Chuck


_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to 
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 
6303 Barfield Road, Atlanta, Georgia, USA 30328.




_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to 
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 
6303 Barfield Road, Atlanta, Georgia, USA 30328.



_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to 
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 
6303 Barfield Road, Atlanta, Georgia, USA 30328.

<Prev in Thread] Current Thread [Next in Thread>