RE: Stop process

["Polazzo Justin" <Justin.Polazzo () facilities gatech edu>]

I am a newbie too but,..

> From what I know the only service that you could stop would be the rpc service, if you do not want to do that (you 
> wouldnt get any inbound packets either then), set up snort to stop the outbound packets and then generate your own at 
> your leisure.

Another way would be to use xp sp2 firewall to stop outbound 135.

jp



-----Original Message-----
From: King Kong [mailto:kingkong21 () arcor de]
Sent: Thursday, May 27, 2004 8:11 AM
To: honeypots () securityfocus com
Subject: Stop process


Hi all,

I am a newbie so maybe this is a stupid question.
I am writing my own honeypot for Windows. So far so good but when I try to 
send back my data packets an answer from my Windows has already been made. 
The packets (Blaster) arrive on port 135 on my machine. What process do I 
have to stop and how to stop them so that my OS does not automatically send 
any reply. I am using Windows (XP,2000,98)

Thanks in advance
KingKong