OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-Disclosure] microsoft phoning home?

From: Justin Shin (zorkshintampabay.rr.com)
Date: Thu Jul 03 2003 - 20:22:18 CDT


Hey

I was curious after reading your email so I ran ethereal and sure enough, I
got about 20 TCP packets and two HTTP packets. Maybe some sort of feature,
no?

-- Justin
----- Original Message -----
From: "bscabl" <bscablnycap.rr.com>
To: <full-disclosurelists.netsys.com>
Sent: Thursday, July 03, 2003 7:33 PM
Subject: [Full-Disclosure] microsoft phoning home?

im not sure if this is 'normal' or not, but in XP pro with sp1 if i bring up
the search dialog

i get this:

1,[03/Jul/2003 19:30:29] Rule 'microsoft': Blocked: Out TCP,
localhost:1217->207.46.248.249:80, Owner: D:\WINDOWS\EXPLORER.EXE
1,[03/Jul/2003 19:30:29] Rule 'microsoft': Blocked: Out TCP,
localhost:1218->207.46.248.249:80, Owner: D:\WINDOWS\EXPLORER.EXE

it seems to be trying to contact 207.46.248.249, wich is sa.microsoft.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html