Protocol and test

[Nadir]

Hi all,

For security issue I need to know what protocol and port exactly use AHM for:
nt eventlog test
services test
performance counter test
cpu usage
drive free space
folder/file size
count files
file integrity
text log
compare file

I thinks he use RPC calls is exact?

Thanks a lot

[KS-Soft]

Lets say HostMonitor does not use (directly) any protocol and port for these tests. HostMonitor uses Windows API.
Windows uses RPC for the following test methods
- nt eventlog test
- services test
- performance counter test
- cpu usage
RPC calls may use any port above 1023

And Windows calls network client to perform the following tests
- drive free space
- folder/file size
- count files
- file integrity
- text log
- compare file
This means port and protocol depends on network client that you are using. E.g. NETBIOS uses ports 137-139

Regards
Alex

[Nadir]

Thanks a lot Alex