Wingate 6.0 RC2 -a virus??

Jul 17 04 9:08 am

today, i installed latest rc: 2, 975 . i observed something strange on the outside interface: it was contuing transmiting/receiving packets. 1/second. This happened on a fresh install of windows 2000 professional, full updated in the same day( 16 july 2004). in the activity tab, nothing, except my connection to wingate. i said to myself: a virus.ok. but who? i put tcpView from sysinternals: nothing strange. that is no connection established except wingate and gatekeeper. cool. so who is it? i ran filemon from sysinternals. this is what happened: WinGate was reading files like .. system32/ras/ and all users/.../phone.pbk or such a thing. why is happening this?? this files were scanned very often, at least 5 times/second. who was generating traffic? and why?? it wasnt icmp .i dont know what traffic was.

Jul 17 04 1:30 pm

This is the new Gateway detection feature, once a second we check all known gatesway to check they are not dead. If you wish to turn this off go to the Extended Networking Properties in Gatekeeper and UNtick the Gateway detection option on the General pane.

Regards
Neil

Jul 17 04 9:03 pm

you are right. my mistake. sorry. What tupe of packets are you sending? ICMP? RIP?

Jul 18 04 8:41 pm

ARP

this also then keeps us fresh for the MAC address of the next hop, in case there is some upstream failover scheme as well, we will quickly lock onto a failover gateway.

We are looking at some optimisations for this as well.

Adrien