CSA registeration with CSA MC help

[mohamed_makled]

Hi,

Actually , i installed CSA MC on a server (its name CSAMC.NMEG.Loacl), and i tried to install the CSA on a group of servers .

The CSA MC and these servers are in the same domain. One of these servers (its name EG-NMEG-BACKUP.NMEG.LOCAL)

is registered with the CSA MC but there is an event regarding to this server in the event log.

Also there are some events regarding to DNS server (10.192.64.2) and DHCP server(10.192.64.3)

what does these events mean????

Please find the attached file for the event log.

best regards

Mohamed

[sbilgi]

TCP port 139 corresponds to Netbios session service which is normally meant for computer in a domain, That is not working for this computer.

[juergen.bauer]

... and udp 123 is of course NTP - so this server seems to be your time server.

for the smhstart.exe:

"Command: C:\hp\hpsmh\bin\smhstart.exe

Description: The HP System Management Homepage is a web-based interface that consolidates the infection retrieve by the other Insight agents running on the server."

so it seems the exe is collecting data on your server about processes etc.

best regards

juergen