No access to remote NT event log

bizzz · Post by **bizzz** » Mon Sep 01, 2003 3:44 am

Hello,

I use Hostmonitor 3.64 and all was fine until a virus attack occured last week on our enterprise network (Welchia/Nachim).

All the tests using "NT event log" method are now with status "Unknown".
The remote event logs are not accessible from my local Hostmonitor.
I think our network team has applied some restrictions on our intranet.

The remote systems are all OK, so my question :
What are the requested conditions for a correct execution of this test?
I suppose some ports were made unavailable for network protection...

Thanks for your help

KS-Soft · Post by **KS-Soft** » Mon Sep 01, 2003 8:47 pm

As I know RPC (Remote Procedure Call) service uses a port mapping, it can use different ports above #1024.

Regards
Alex

bizzz · Post by **bizzz** » Tue Sep 02, 2003 1:53 am

Thank you Alex.

Strangely, this morning one remote sytem correctly answers, but another one, on the same network segment and with exactly the same configuration is still not responding for this test.

I continue my investigations...

Regards

KS-Soft · Post by **KS-Soft** » Tue Sep 02, 2003 12:11 pm

Do you use "Connect as" option of the test? If not, HostMonitor did not log in to that system after the system was restarted.

Regards
Alex

bizzz · Post by **bizzz** » Wed Sep 03, 2003 1:28 am

Yes, I always use the option "connect as".

All is now solved, but I have not understood

(

Our network team said they only unvalidated port #135... I think there was others modifications done

But today all is OK! I thank you for your help

Regards