Windows  process showing up on pc free LAN - hacked? router? printer?

In our firewall log we can see a samba connection being made from an ip on our LAN - we have no windows pcs or vritualisation software running. Our firewall is set to allow AFP + printer sharing. There is a wireless network so could someone have hacked it?
Feb 2 09:04:43 Mac-Pro Firewall[47]: Allow smbd connecting from 192.168.0.4:49161 uid = 0 proto=6
What could this be? I thought it could be a printer? Is there any way of identifying a printers IP? A few weeks ago our firewall was set to block all connections and we were getting this print related message
Jan 29 12:04:44 Mac-Pro Firewall[47]: Deny cupsd data in from 192.168.0.3:631 uid = 0 proto=17
We no longer get that, but we now get the smb one. The IPs are different though, but i've heard they can change. Many thanks

You may have turned on file sharing on a machine at 192.168.0.4. It's definitely a message coming from a machine on your local net, though.
The cupsd is printer sharing, on a machine at 192.168.0.3. It even has the proper port number, 631, unlike the smbd message, which appears to have a UDP port.

Similar Messages

  • Is there any way in Finder I can get the window to show the amount of free space on a selected drive?

    I am not a fan of all the changes they have made to finder in Lion.

    Sorry, I didn't know this was so old when I replied. I hope it was helpful anyway.
    Go to desktop, click on hard drive, command+I or File ... Get Info.
    Then you will see the info for that drive and listing the available space.

  • FireFox starts, process shows in task manager, GUI doesn't appear.

    Well I just installed windows 7 pro 64 bit. Installed firefox 3.6.13. Worked fine (Using my 8years old profile). Then in mean time SP1 finished installing. After reboot firefox doesn't work. Nor the profile manager (firefox -p) nor the safe mode (firefox -s) nor normal mode. All those make firefox process show up in task manager, but no GUI. Same goes for firefox 4 beta. All versions of 3.6.4 up (so all versions with plugin container) and 4 beta I can find and download behave the same. Even some 3.7 alpha 5 thingy. Only version that works without troubles is 3.5.x and 3.6 up to 3.6.3 I'm on atm. I totally don't get it why its happening. Same profile with 3.6.4+ and 4 beta works fine on my sis laptop on same windows, with same updates. Actually first time it happened was on 32bit version of windows 7 pro. Firefox 3.6.11 (there weren't any newer version out yet) just stopped to work with issues like above described after one of windows updates. Cant pin point which one now cuz it was months ago. My rig is E8200, 6GB DDR2 1066cl5 ram, Gigabyte Ep45-Ds3r, ati 4850. I cant point anything else than just some windows 7 pro update, hardware and plugin container incompatibility. 1 in a million chance that makes this happen and of course I'm the happy winner of firefox issues ^_^. For people asking to switch of plugins and testing other profile. If I downgrade to 3.5 or 3.6.3 change profile to naked new one, then upgrade to 3.6.4+ or 4 beta, and exactly same stuff happens: no GUI, firefox process in tasks with 10-20 threads, and 7-30MB loaded into memory (depending on version, mode used).

    Well I write once again. This time I have solution to my problem. Its HDTunePro 4.5. I admit I do have an not so legit version, and it seems its loaded with some crap, or the HDTunePro itself is. Thing is, after reinstalling whole OS (Win 7 Pro 64bit). With everything: drivers, games, programs. Everything worked, ACDSee, FF4.0, and so on. Then after installing HDTune - magic: FF, ACDSee stopped to work the same way it was before. In a process of finding out what exactly is at fault here (cuz I did install few windows updates with HDTune) I found few things: First, installing that HDTune from its install file, makes FF, ACDSee not work (the loading issue with programs stuck in task manager). But whats funny HDTune itself have the same issue (15 day trial - doesnt boot up more than process in task manager). Patching it with that not so legit thingy makes HDTune work, but all other stuff not. So solution is simple, not using HDTune Pro, at least 4.5 non legit version (HAHA theres a lesson here to not pirate software). Or do a work around - make system restore point, install HDTune, patch it, change extension of exe file (so it will not be *.exe), restore OS to that restore point, change exe extension back to *.exe, done. After this HDTune and all other stuff works.

  • Event ID: 7024 Windows Process Activation Service will not start error %%-2147467243

    Reside on a network that contains network GPOs.  We are given authority to create unique GPOs for our specific LAN Web server.  Our Intranet web page requires Windows Process Activation Service and another service to open.  Before creating
    the local GPO, the two services were in Disabled mode, but we could set them to Manual and start them.  The network GPOs would reset them at random every few hours, but again we could reset them.  After creating the local GPO, the WPAS is set to
    Manual and will not start at all with the Title errors being generated.  Administrator previously completed successful GPO mods in WinSvr2003.  Is there a different way of doing GPOs in WinSvr2008R2?  I cannot provide logs or further details
    other than the above.  Any ideas would be helpful.

    > open.  Before creating the local GPO, the two services were in Disabled
    > mode, but we could set them to Manual and start them.  The network GPOs
    > would reset them at random every few hours,
    Then you should adjust your "network" GPOs which we usually call "domain
    gpos"...
    > them.  After creating the local GPO, the WPAS is set to Manual and will
    > not start at all with the Title errors being generated.
    # for hex 0x80004015 / decimal -2147467243 :
      CO_E_WRONG_SERVER_IDENTITY
    winerror.h
    # The class is configured to run as a security id different
    # from the caller
    # 1 matches found for "80004015"
    Seems you screwed up the service account or service security or
    something like that...
    > previously completed successful GPO mods in WinSvr2003.  Is there a
    > different way of doing GPOs in WinSvr2008R2?
    No.
    Martin
    Mal ein
    GUTES Buch über GPOs lesen?
    NO THEY ARE NOT EVIL, if you know what you are doing:
    Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))

  • Exchange 2013 CU 1 - Windows process activation errors

    Hi,
    after upgrading to Exchange 2013 CU1, I get the following errors in the eventlog for all Exchange Application pools. These errors show up every 5 to 10 minutes:
    A process serving application pool 'MSExchangeECPAppPool' suffered a fatal communication error with the Windows Process Activation Service. The process id was '8068'. The data field contains the error number.
    A process serving application pool 'MSExchangeOWAAppPool' suffered a fatal communication error with the Windows Process Activation Service. The process id was '8248'. The data field contains the error number.
    A process serving application pool 'MSExchangePowerShellFrontEndAppPool' terminated unexpectedly. The process id was '8652'. The process exit code was '0xffffffff'.
    Exchange 2013 CU1 is running on Windows 2012.
    Franc.

    Hi,
    It is a IIS error. Please check the Windows Process Activation service in the Exchange server. Make sure the service is started. 
    Please have a try to restart the server then change the issue again.
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Sean Xiao
    TechNet Community Support

  • Any RunningApplications-like function for non-windowed processes?

    Am I missing any RunningApplications-like function for non-windowed processes like Unix executables? To start with I'd settle for processes in user-space but would ultimately like to list processes like Activity Monitor does. Even comparing RunningApplications results to user space Activity Monitor results will show the difference.
    As far as I can tell you need to go all the way down to kauth and kernel space to watch for non-windowed processes being launched. Is there somethig in-between I'm missing? A notification device about launching apps would be perfect if it cover all processes.
    Thanks,
    =Tod

    I think kqueue may be able to do what you want. Look at the EVFILT_PROC filter. You may have to watch a number of processes - perhaps all of them. But that would tell you any time you get a fork and whenever a process is reaped.
    I looked at kqueue at it does what I want but you need to register it on a by process/file basis which is great for a very specific set of things but not for overall system watching. (I also looked at fsevents but it is designed as a post-event notification system.) While NSWorkspace has the usual Cocoa model notifcation willlaunchApp, didlaunchApp, etc it seems that you need to get the kernel to watch the launch lifecycle of non-windowed functions.
    I actually did manage to get a comprehensive list of running apps out of parsing sysctl output with much less trouble than I expected. So far I have managed to get the pid, uid and abbreviated processname and the list seems to match the Activity Monitor list - at least at this testing printf stage. Getting the username from uid should be trivial and the full file name is doable it just requires some struct length and offset math. I'd like the launch path information but I can live without it for monitoring purposes if I can't figure out how to get it.
    This means that the monitoring part of the running system seems relatively straight forward - wrapping the call in an NSTimer and watching for changes in the returned results. But the watching of the actual starting and stopping of all processes remains some deeper work.
    Thanks for all the suggestions,
    =Tod

  • I want to partition c drive but it shows an message no free MBR slots available how it can be fix?

    i have hp dv62127 laptop and I want to partition C disk drive into 2 more disk drives but this laptop contain 4 primary partition and due to  it shows an message no free MBR slots available so how it can be fixed so that i could make 3 partion?
    This question was solved.
    View Solution.

    You can resize (shrink) the C: Partition and make logical drives within it. You cannot make more Primary drives. There is a limit of four primary drives in a Windows operating system.The new logical drives will not be bootable.
    Be advised: 
    When you change the original partition scheme you will lose the ability to access the Recovery manager with the F11 keystroke to recover your operating system.
    A better option is to purchase a second hard disk. Back up the data on your original hard drive so you can put it on the new one.  Remove the original hard drive and perform a system recovery using the recovery media to the new hard disk. With the original hard disk put aside in a safe place you can always recover your notebook by removing the new hard drive and putting the old one back in its place. The F11 method of invoking the Recovery manager will be available on the new hard drive. The original hard disk in your notebook is a SATA 2.5" notebook that is 9.5mm in height. If you consider a disk larger than 500GB pay close attention to the height. A 12.5mm might not fit in the drive bay.
    Identify your notebook with the p/n (Product name) shown on the sticker on the bottom of the notebook  The following image is a sample service tag.You posted an incomplete and improperly formatted model number. There are two letters missing that
    should be on the end of what you posted.
    Best regards,
    erico
    ****Please click on Accept As Solution if a suggestion solves your problem. It helps others facing the same problem to find a solution easily****
    2015 Microsoft MVP - Windows Experience Consumer

  • ST06 show negative Physical mem free

    Dear Guru,
    When I look into ST06 - Operating System Monitor, table Memory, it shows that Physical mem free is negative, "1-".
    Here's the screenshot:
    Could anyone please advice, how to fix this one via RZ10 - Edit Profiles; which parameters should I look up to?
    And how big should I put in?
    Our server specification:
    OS/database: AS/400 with DB2
    CPU: 2 cores
    Memory: 32 GB
    Thank you.
    Best Regards,
    Ady Purnama

    Hi,
    Are the sapservices running especially oscol process.
    May be the sap note and below links might help
    SAP Note : - 189072 - ST06/OS06: No data or incorrect data displayed
    link - http://wiki.scn.sap.com/wiki/display/NWTech/How+to+analyse+the+missing+performace+data+situation+and+how+to+check+SAPOsCol+issues
    Regards,
    Nikhil

  • Removed working Firefox 7, Installed Firefox 10.0, Firefox will not load. When I click on icon, firefox.exe process shows briefly in task manager, then goes away....no errors, nothing

    Removed working Firefox 7, Installed Firefox 10.0, Firefox will not load. When I click on icon, firefox.exe process shows briefly in task manager, then goes away....no errors, nothing. Never see browser panel at all. Also tried to install Firefox 9.0, but the same result was observed.

    Rather difficult to say what the problem may be at present but for general info please have a look at
    * [[safe mode]]
    *[[firefox will not start]]
    *[[firefox hangs]]
    Note sometimes you may have to wait a while for firefox to shutdown completly, and if it has hung then as explained in the above articles you may need to kill any firefox.exe process that is still running (and maybe plugincontainer.exe)
    Try starting firefox in [[safe mode]] e.g. by holding down shift key
    * do not make any changes in the first window, just click on continue<br/> ? Do you get as far as seeing the options window for safe mode ?
    If firefox is crashing see [[firefox crashes]], this is easier to work through if you can get firefox to start without crashing on startup. Currently some firefox users are finding Firefox 10 crashes on startup, and a new version Firefox 10.0.1 is being released very soon to deal with this and another cause of hangs.
    Not saying any of this applies to your case but recent issues include
    * ask tool bar causing hangs if video is used none English versions [/forums/contributors/708073]
    * possibly some crashes do not start the crash reporter and other issues [/forums/contributors/708122?page=2#post-45059]
    * some general info about current crashes [/questions/917748#answer-308124]

  • How to have Windows computers show up in shared...

    I am having the worst trouble with this. My parents' Windows computer showed up under "Shared" on the sidebar at first on Leopard, but then all of a sudden it disappeared and I haven't been able to get it back there. What is the secret?

    Hi Matt,
    I'm having the same problems, really irritating! I've no answer I'm afraid, though a temporary solution is:
    In the finder menu, select Go -> Connect to Server (or hit apple+k)
    In the server address box, type smb://Target_Computer Name
    Obviously, replace TargetComputerName with the network name of the computer you want to connect to. So it could be smb://dev or smb://johnscomputer etc...
    Hope this helps a little.

  • What is the default key command for the COMMAND key?I seem to have changed it somehow along the way and now when I push the command key it hides all windows or shows desk top I need to correct this as soon as possible-.any ideas?

    What is the default key command for THE COMMAND (apple) key? I seem to have changed it somehow along the way and now when I push the command key (only) it hides all open windows and shows the desk top and when I push it again it shows all windows again...I need to return to default A.S.A.P. just this one key...Any ideas? Thanks in advance...

    Go to
     > System Preferences > Keyboard
    Click on the 'Keyboard' tab and hit the 'modifier keys...' button. You can see and change the defaults there.
    As I'm not sure if all the labels are the same in Lion, he's a screenshot from Snow Leopard. It should be similar enough:

  • New tabs are not updating the names of the sites they have loaded. When I open a new tab and load a site, the tab simply stays named "New Tab". When I open a link in a new window, it shows "Connecting..." even while its fully loaded.

    New tabs are not updating the names of the sites they have loaded. When I open a new tab and load a site, the tab simply stays named "New Tab". When I open a link in a new window, it shows "Connecting..." even while its fully loaded.

    This issue can be caused by an extension that isn't working properly.
    Start Firefox in <u>[[Safe Mode]]</u> to check if one of the extensions is causing the problem (switch to the DEFAULT theme: Firefox (Tools) > Add-ons > Appearance/Themes).
    * Don't make any changes on the Safe mode start window.
    * https://support.mozilla.com/kb/Safe+Mode
    * [[Troubleshooting extensions and themes]]

  • Firefox (latest versions) on both Mac 10.6 and Windows 7 show "this Connection is Untrusted" on my bank site

    This started for me 1/17/2011 on the savingsbank.com website:
    Firefox (latest versions) on both Mac 10.6 and Windows 7 show "this Connection is Untrusted" on my bank site https://www.savingsbank.com
    NO other browsers - Explorer, Chrome, Safari - give this error box on this site. Please advise if this has to do with the bank site? or Firefox compatibility.
    Saw in a forum someone else having this problem and they were told it had to do with their Date and time being off?? I've been on several computers, all with the correct date and time and they've all shown this Insecure Certificate statement on my bank site with Firefox and no other browser.

    I've looked at the banking site with IE8 and it does NOT show me that "This connection is Untrusted" window. (please see attached screen shot of viewing the site with IE8) It opens fine and has "Identified by Network Solutions" showing on the address bar as it always does.
    The latest version of Opera (not earlier ones) does show a problem with the website's security certificate.
    We've contacted the bank about this, and they say there's no problem with their certificate but are looking into it.
    My question remains, why only Firefox and one version of Opera claim this and NO other browser?

  • When re installing iTunes on window it shows error message: Service Apple mobil divice does not start

    When re installing iTunes on window it shows error message: Service Apple mobil divice does not start

    Try the following user tip:
    Troubleshooting issues with iTunes for Windows updates

  • Often, Firefox app will close, but the underlying Windows process will not and cannot be stopped via Task Manager. When this happens, Firefox can no longer be used...the system must be rebooted.

    Hello,
    Often, the Firefox app will close, but the underlying Windows process will not and cannot be stopped via Task Manager. When this happens, Firefox can no longer be used...the system must be rebooted. This happens especially when many apps are running but even though there are plenty of memory resources available.
    I have tried to find if something is using Firefox in the background, but have no way to know what that would be.
    Their are no apparent viruses detected.
    Firefox is version v5.0 and occurred in earlier release.
    System is Windows 7 (64bit).

    well, it's not the same hardware and it's a bit different.
    I managed to pass that stage somehow but I still have a problem
    I don't use the built-in creator tool that comes with Spyrus as it doesn't know how to append a pre-staged media that was created by SCCM that should apply the Windows file system to a second partition and the WinPE to the first partition.
    I managed to do everything. my only problem is that the WTGCreator that comes with SCCM 2012 R2 creates the 350MB partition with FAT32 file system.
    when I boot from the device I get the WinPE, I can choose a task sequence and then it fails when trying to apply the wim file. the error tells me that the 350MB partition is FAT32 which is not supported (even though it chooses the second partition, which
    is all the rest of the disk space)
    what I did was adding another task that converts the 32 Fat partition to an NTFS partition and then the process continues and finishes successfully! but that's a workaround.
    I'm trying to make this process as smooth as possible without having additional steps
    Tamir Levy

Maybe you are looking for

  • How can I change the background color of odd/even rows in a panelCollection

    Hi everyone. I'm using a panelCollection and I need to change the backgroung color for odd/even rows in the table, how can I do this, using a stylesheet, is there a special selector or property for this? globalResultCollection (UIPanelCollection obje

  • Battery life in Macbook PRO MD102A/E

    Good afternoon. I have a question: My laptop is a macbook pro model MD102E / A, in the catalog said it was 7 hours of battery life, but to use it, I always mark two hours 30 minutes, not many programs use, just open the safari and nothing more and do

  • ORA-01595 just after Oracle startup

    Hi there I'm trying to find explanation on these errors because they occurred just after Database open and ready ! ORA-01595: error freeing extent (2) of rollback segment (1)) ORA-01594: attempt to wrap into rollback segment (1) extent (2) which is b

  • Datasource for financial reporting structure

    Hello, I am extracting data from several finance datasources (FINGLAU*) to an external BW system. For several reporting requirements I need an extract of the so-called Financial Reporting Structures, which are effectively hierarchies of GL-accounts.

  • Key Figure based on condition between characterisics

    Hello Guys I have a key figure which needs to be displayed based on condition between 2 characteristics. Scenario: I have 2 fiscal periods : FP1 and FP2. and a Key Figure KF. Condition: Show KF only when FP1 not equals FP2. EX: If FP1 = May and FP2 =