[cisco-voip] SmartDTP

[Jason Aarons (AM)]

This looks like something for  Mark Russinovich's blog! http://technet.microsoft.com/en-us/sysinternals/bb963890

I would run the built in Microsoft Network Monitor and look at the source/destination traffic. Microsoft would use Sysinternals tools to further view the process/thread.

To me it looks like something third party, could be malicious/rootkit.


From: cisco-voip-bounces at puck.nether.net [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Peter
Sent: Friday, July 22, 2011 8:40 AM
To: Ryan Ratliff
Cc: cisco-voip at puck.nether.net
Subject: Re: [cisco-voip] SmartDTP


Hi,

Didn't find anything there too. Attached you will find a printscreen, have some clues?

Regards,
Peter
----- Original Message -----
From: Ryan Ratliff<mailto:rratliff at cisco.com>
To: Peter<mailto:peter at trace-route.nl>
Cc: cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
Sent: Monday, July 18, 2011 7:25 PM
Subject: Re: [cisco-voip] SmartDTP

eventid.net<http://eventid.net/> has been very useful in the past for hunting down mysterious events.

Otherwise the full event may provide more clues.

-Ryan

On Jul 14, 2011, at 3:23 AM, Peter wrote:

Hello,

I get errors in my event viewer with a Call Manager 4.x showing "smartDTP"
messages. Does anyone knows what this is?

Thanks in advance.

Regards,
Peter

_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip



itevomcid
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20110722/9080b738/attachment.html>