Endpoint Protection

 View Only
Back to discussions
Expand all | Collapse all

[SID: 20628] MSRPC Mutiple Headers detected. Traffic has been allowed from this application: C:\WINDOWS\system32 toskrnl.exe

  • 1.  [SID: 20628] MSRPC Mutiple Headers detected. Traffic has been allowed from this application: C:\WINDOWS\system32 toskrnl.exe

    Posted Oct 22, 2009 10:57 PM
      |   view attached
    I have seen this messgae in NTP log.I have also attached the printscrn.Can anybody help me out...

    Soumya Ghosh
    Network Executive
    Shriram Insight Share Brokers Limited
    India


  • 2.  RE: [SID: 20628] MSRPC Mutiple Headers detected. Traffic has been allowed from this application: C:\WINDOWS\system32 toskrnl.exe



  • 3.  RE: [SID: 20628] MSRPC Mutiple Headers detected. Traffic has been allowed from this application: C:\WINDOWS\system32 toskrnl.exe

    Posted Oct 22, 2009 11:37 PM
    Is it applicable for Windows XP service pack 2 also?...


  • 4.  RE: [SID: 20628] MSRPC Mutiple Headers detected. Traffic has been allowed from this application: C:\WINDOWS\system32 toskrnl.exe

    Posted Oct 22, 2009 11:59 PM
    It seems to be appearing on XP SP3 only. One of my machine in XP SP2 is not reporting...