topic Re: CSA registeration with CSA MC help in Network Security

CSA registeration with CSA MC help

mohamed_makled — Sun, 10 Mar 2019 10:38:05 GMT

Hi,

Actually , i installed CSA MC on a server (its name CSAMC.NMEG.Loacl), and i tried to install the CSA on a group of servers .

The CSA MC and these servers are in the same domain. One of these servers (its name EG-NMEG-BACKUP.NMEG.LOCAL)

is registered with the CSA MC but there is an event regarding to this server in the event log.

Also there are some events regarding to DNS server (10.192.64.2) and DHCP server(10.192.64.3)

what does these events mean????

Please find the attached file for the event log.

best regards

Mohamed

Re: CSA registeration with CSA MC help

sbilgi — Tue, 05 Jun 2007 23:54:10 GMT

TCP port 139 corresponds to Netbios session service which is normally meant for computer in a domain, That is not working for this computer.

Re: CSA registeration with CSA MC help

juergen.bauer — Wed, 06 Jun 2007 10:49:31 GMT

... and udp 123 is of course NTP - so this server seems to be your time server.

for the smhstart.exe:

"Command: C:\hp\hpsmh\bin\smhstart.exe

Description: The HP System Management Homepage is a web-based interface that consolidates the infection retrieve by the other Insight agents running on the server."

so it seems the exe is collecting data on your server about processes etc.

best regards

juergen