• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

allow LSA Shell to connect to remote machine?

#1
check the screen shot. i wasnt too sure on this.

"File Version : 5.1.2600.1106 (xpsp1.020828-1920)
File Description : LSA Shell (Export Version)
File Path : C:\WINDOWS\system32\lsass.exe
Process ID : 214 (Heximal) 532 (Decimal)

Connection origin : remote initiated
Protocol : UDP
Local Address : *.**.***.*** <--- i took this out
Local Port : 500 (ISAKMP - Internet Security Association and Key Management/IPSEC Key Exchange)
Remote Name :
Remote Address : 4.65.222.101
Remote Port : 500

Ethernet packet details:
Ethernet II (Packet Length: 98)
Destination: 00-05-5d-d0-ac-e3
Source: 00-02-3b-00-85-6e
Type: IP (0x0800)
Internet Protocol
Version: 4
Header Length: 20 bytes
Flags:
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset:0
Time to live: 123
Protocol: 0x11 (UDP - User Datagram Protocol)
Header checksum: 0xb6a6 (Correct)
Source: 4.65.222.101
Destination: 4.63.164.190
User Datagram Protocol
Source port: 500
Destination port: 500
Length: 8
Checksum: 0xf7ef (Correct)
Data (64 Bytes)"

thankyou.
 
#3
should i assume no shell should need to access an remote connection? what other file (for future reference) should not need to connect to a remote connection?

thanks Enyo!
 
#4
Many a mass of this that should not go out :) For windows components allow them to go outbound but nothing comes inbound from the internet, nothing, ever! :) If there is anything else specific let me know...
 

Members online

No members online now.

Latest posts

Latest profile posts

Hello, is there anybody in there? Just nod if you can hear me ...
Xie
What a long strange trip it's been. =)

Forum statistics

Threads
61,961
Messages
673,239
Members
89,014
Latest member
sanoravies