[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[port139:01002] Re: DEMARC (was Re: p.0.f)
- To: port139@xxxxxxxxxxxxx
- Subject: [port139:01002] Re: DEMARC (was Re: p.0.f)
- From: Miharu <ensi@xxxxxxxxxxxxxxxx>
- Date: Wed, 30 Jan 2002 01:05:44 +0900
瞠@今更ながら連邦軍につくかジオン軍につくか思案中です(^^;
>ファイルの Integrity Check に興味があって設定ファイルだけを
>ちょっと見たんですが、基本的には 5分単位でインターバルを指定
>なんですかね？
30分単位のインターバルでチェックしているようです。
ここの設定はdemarcd.confにある、
# If client runs every 5 mins, a "6" here will make the file check run every 30 minutes
# (default: 6)
# (shouldn't have to change this)
check_every_n_interations = 6
が該当しているようですが、
30分単位のインターバルが基本みたいですね。
shouldn't have to change this なんて言われているので、
"6"を変更するとどうなるか気になるところです。
本当に30分単位のインターバルなのか？と思い、
filmonで確認しました。テストしたファイルはc:\test.txt。
参考になるのか分かりませんが、チェック1回分のデータをコピペしときます。
※filemon http://www.sysinternals.com/ntw2k/source/filemon.shtml
おまけ)
さらにPCの時刻を無理やり20分程度進めた状態で、
30分のインターバルによるチェックが行われるのか調査したところ、
demarcd.exeからtest.txtへのアクセスが見られなかった(はず)。
その状態を保持して、チェックが行われているのか
実施してなかったりしますが、それは別途ということで(^^;
#,Time,Process,Request,Path,Result,Other
337,0:15:18,demarcd.exe:1528,IRP_MJ_CREATE,C:\test.txt,SUCCESS,Attributes: Any Options: Open
338,0:15:18,demarcd.exe:1528,IRP_MJ_QUERY_VOLUME_INFORMATION,C:\test.txt,SUCCESS,FileFsVolumeInformation
339,0:15:18,demarcd.exe:1528,IRP_MJ_QUERY_INFORMATION,C:\test.txt,BUFFER OVERFLOW,FileAllInformation
340,0:15:18,demarcd.exe:1528,IRP_MJ_CLEANUP,C:\test.txt,SUCCESS,
341,0:15:18,demarcd.exe:1528,IRP_MJ_CLOSE ,C:\test.txt,SUCCESS,
342,0:15:18,demarcd.exe:1528,IRP_MJ_DIRECTORY_CONTROL,C:\,SUCCESS,FileBothDirectoryInformation: test.txt
343,0:15:18,demarcd.exe:1528,IRP_MJ_CREATE,C:\test.txt,SUCCESS,Attributes: Any Options: Open
344,0:15:18,demarcd.exe:1528,IRP_MJ_QUERY_VOLUME_INFORMATION,C:\test.txt,SUCCESS,FileFsVolumeInformation
345,0:15:18,demarcd.exe:1528,IRP_MJ_QUERY_INFORMATION,C:\test.txt,BUFFER OVERFLOW,FileAllInformation
346,0:15:18,demarcd.exe:1528,IRP_MJ_CLEANUP,C:\test.txt,SUCCESS,
347,0:15:18,demarcd.exe:1528,IRP_MJ_CLOSE ,C:\test.txt,SUCCESS,
348,0:15:18,demarcd.exe:1528,IRP_MJ_DIRECTORY_CONTROL,C:\,SUCCESS,FileBothDirectoryInformation: test.txt
349,0:15:18,demarcd.exe:1528,IRP_MJ_CREATE,C:\test.txt,SUCCESS,Attributes: Any Options: Open
350,0:15:18,demarcd.exe:1528,IRP_MJ_QUERY_VOLUME_INFORMATION,C:\test.txt,SUCCESS,FileFsVolumeInformation
351,0:15:18,demarcd.exe:1528,IRP_MJ_QUERY_INFORMATION,C:\test.txt,BUFFER OVERFLOW,FileAllInformation
352,0:15:18,demarcd.exe:1528,IRP_MJ_CLEANUP,C:\test.txt,SUCCESS,
353,0:15:18,demarcd.exe:1528,IRP_MJ_CLOSE ,C:\test.txt,SUCCESS,
354,0:15:18,demarcd.exe:1528,IRP_MJ_DIRECTORY_CONTROL,C:\,SUCCESS,FileBothDirectoryInformation: test.txt
355,0:15:18,demarcd.exe:1528,IRP_MJ_CREATE,C:\test.txt,SUCCESS,Attributes: Any Options: Open
356,0:15:18,demarcd.exe:1528,IRP_MJ_QUERY_VOLUME_INFORMATION,C:\test.txt,SUCCESS,FileFsVolumeInformation
357,0:15:18,demarcd.exe:1528,IRP_MJ_QUERY_INFORMATION,C:\test.txt,BUFFER OVERFLOW,FileAllInformation
358,0:15:18,demarcd.exe:1528,IRP_MJ_CLEANUP,C:\test.txt,SUCCESS,
359,0:15:18,demarcd.exe:1528,IRP_MJ_CLOSE ,C:\test.txt,SUCCESS,
360,0:15:18,demarcd.exe:1528,IRP_MJ_DIRECTORY_CONTROL,C:\,SUCCESS,FileBothDirectoryInformation: test.txt
361,0:15:18,demarcd.exe:1528,IRP_MJ_CREATE,C:\test.txt,SUCCESS,Attributes: Any Options: Open
362,0:15:18,demarcd.exe:1528,IRP_MJ_QUERY_VOLUME_INFORMATION,C:\test.txt,SUCCESS,FileFsVolumeInformation
363,0:15:18,demarcd.exe:1528,IRP_MJ_QUERY_INFORMATION,C:\test.txt,BUFFER OVERFLOW,FileAllInformation
364,0:15:18,demarcd.exe:1528,IRP_MJ_CLEANUP,C:\test.txt,SUCCESS,
365,0:15:18,demarcd.exe:1528,IRP_MJ_CLOSE ,C:\test.txt,SUCCESS,
366,0:15:18,demarcd.exe:1528,IRP_MJ_DIRECTORY_CONTROL,C:\,SUCCESS,FileBothDirectoryInformation: test.txt
367,0:15:18,demarcd.exe:1528,IRP_MJ_CREATE,C:\test.txt,SUCCESS,Attributes: N Options: Open
368,0:15:18,demarcd.exe:1528,IRP_MJ_CREATE,C:\test.txt,SUCCESS,Attributes: N Options: Open
369,0:15:18,demarcd.exe:1528,IRP_MJ_QUERY_INFORMATION,C:\test.txt,SUCCESS,FileInternalInformation
370,0:15:18,demarcd.exe:1528,IRP_MJ_CLEANUP,C:\test.txt,SUCCESS,
371,0:15:18,demarcd.exe:1528,IRP_MJ_CLOSE ,C:\test.txt,SUCCESS,
372,0:15:18,demarcd.exe:1528,IRP_MJ_CREATE,C:\test.txt,SUCCESS,Attributes: N Options: Open
373,0:15:18,demarcd.exe:1528,FASTIO_QUERY_STANDARD_INFO,C:\test.txt,SUCCESS,Size: 8
374,0:15:18,demarcd.exe:1528,IRP_MJ_CLEANUP,C:\test.txt,SUCCESS,
375,0:15:18,demarcd.exe:1528,IRP_MJ_CLOSE ,C:\test.txt,SUCCESS,
376,0:15:18,demarcd.exe:1528,IRP_MJ_QUERY_VOLUME_INFORMATION,C:\test.txt,SUCCESS,FileFsVolumeInformation
377,0:15:18,demarcd.exe:1528,IRP_MJ_QUERY_INFORMATION,C:\test.txt,BUFFER OVERFLOW,FileAllInformation
378,0:15:18,demarcd.exe:1528,IRP_MJ_READ ,C:\test.txt,SUCCESS,Offset: 0 Length: 4096
379,0:15:18,demarcd.exe:1528,IRP_MJ_READ*,C:\test.txt,SUCCESS,Offset: 0 Length: 4096
380,0:15:18,demarcd.exe:1528,FASTIO_READ,C:\test.txt,END OF FILE,Offset: 8 Length: 4096
381,0:15:18,demarcd.exe:1528,FASTIO_READ,C:\test.txt,END OF FILE,Offset: 8 Length: 4096
382,0:15:18,demarcd.exe:1528,FASTIO_DEVICE_CONTROL,C:\test.txt,FAILURE,IOCTL: 0x1203F
383,0:15:18,demarcd.exe:1528,IRP_MJ_DEVICE_CONTROL,C:\test.txt,INVALID PARAMETER,IOCTL: 0x1203F
384,0:15:18,demarcd.exe:1528,FASTIO_DEVICE_CONTROL,C:\test.txt,FAILURE,IOCTL: 0x1203F
385,0:15:18,demarcd.exe:1528,IRP_MJ_DEVICE_CONTROL,C:\test.txt,INVALID PARAMETER,IOCTL: 0x1203F
386,0:15:18,demarcd.exe:1528,FASTIO_DEVICE_CONTROL,C:\test.txt,FAILURE,IOCTL: 0x1203F
387,0:15:18,demarcd.exe:1528,IRP_MJ_DEVICE_CONTROL,C:\test.txt,INVALID PARAMETER,IOCTL: 0x1203F
388,0:15:18,demarcd.exe:1528,FASTIO_DEVICE_CONTROL,C:\test.txt,FAILURE,IOCTL: 0x1203F
389,0:15:18,demarcd.exe:1528,IRP_MJ_DEVICE_CONTROL,C:\test.txt,INVALID PARAMETER,IOCTL: 0x1203F
390,0:15:18,demarcd.exe:1528,FASTIO_DEVICE_CONTROL,C:\test.txt,FAILURE,IOCTL: 0x1203F
391,0:15:18,demarcd.exe:1528,IRP_MJ_DEVICE_CONTROL,C:\test.txt,INVALID PARAMETER,IOCTL: 0x1203F
392,0:15:18,demarcd.exe:1528,FASTIO_DEVICE_CONTROL,C:\test.txt,FAILURE,IOCTL: 0x1203F
393,0:15:18,demarcd.exe:1528,IRP_MJ_DEVICE_CONTROL,C:\test.txt,INVALID PARAMETER,IOCTL: 0x1203F
394,0:15:18,demarcd.exe:1528,FASTIO_DEVICE_CONTROL,C:\test.txt,FAILURE,IOCTL: 0x1203F
395,0:15:18,demarcd.exe:1528,IRP_MJ_DEVICE_CONTROL,C:\test.txt,INVALID PARAMETER,IOCTL: 0x1203F
396,0:15:18,demarcd.exe:1528,FASTIO_DEVICE_CONTROL,C:\test.txt,FAILURE,IOCTL: 0x1203F
397,0:15:18,demarcd.exe:1528,IRP_MJ_DEVICE_CONTROL,C:\test.txt,INVALID PARAMETER,IOCTL: 0x1203F
398,0:15:18,demarcd.exe:1528,FASTIO_DEVICE_CONTROL,C:\test.txt,FAILURE,IOCTL: 0x1203F
399,0:15:18,demarcd.exe:1528,IRP_MJ_DEVICE_CONTROL,C:\test.txt,INVALID PARAMETER,IOCTL: 0x1203F
400,0:15:18,demarcd.exe:1528,FASTIO_DEVICE_CONTROL,C:\test.txt,FAILURE,IOCTL: 0x1203F
401,0:15:18,demarcd.exe:1528,IRP_MJ_DEVICE_CONTROL,C:\test.txt,INVALID PARAMETER,IOCTL: 0x1203F
402,0:15:18,demarcd.exe:1528,FASTIO_DEVICE_CONTROL,C:\test.txt,FAILURE,IOCTL: 0x1203F
403,0:15:18,demarcd.exe:1528,IRP_MJ_DEVICE_CONTROL,C:\test.txt,INVALID PARAMETER,IOCTL: 0x1203F
404,0:15:18,demarcd.exe:1528,FASTIO_DEVICE_CONTROL,C:\test.txt,FAILURE,IOCTL: 0x1203F
405,0:15:18,demarcd.exe:1528,IRP_MJ_DEVICE_CONTROL,C:\test.txt,INVALID PARAMETER,IOCTL: 0x1203F
406,0:15:18,demarcd.exe:1528,FASTIO_DEVICE_CONTROL,C:\test.txt,FAILURE,IOCTL: 0x1203F
407,0:15:18,demarcd.exe:1528,IRP_MJ_DEVICE_CONTROL,C:\test.txt,INVALID PARAMETER,IOCTL: 0x1203F
408,0:15:18,demarcd.exe:1528,FASTIO_DEVICE_CONTROL,C:\test.txt,FAILURE,IOCTL: 0x1203F
409,0:15:18,demarcd.exe:1528,IRP_MJ_DEVICE_CONTROL,C:\test.txt,INVALID PARAMETER,IOCTL: 0x1203F
410,0:15:18,demarcd.exe:1528,FASTIO_DEVICE_CONTROL,C:\test.txt,FAILURE,IOCTL: 0x1203F
411,0:15:18,demarcd.exe:1528,IRP_MJ_DEVICE_CONTROL,C:\test.txt,INVALID PARAMETER,IOCTL: 0x1203F
412,0:15:18,demarcd.exe:1528,IRP_MJ_CLEANUP,C:\test.txt,SUCCESS,