cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Level 7
Report Inappropriate Content
Message 1 of 44

HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

Dear all,

we have the following problem since the update from HIPS 8 PATCH 1 to hips HIPS 8 PATCH 2.

After login and 5 - 7 Minutes the firesvc.exe use CPU30 % and blocked connection.

The firewall is active but it was active with HIPS 8 PATCH 1.

I dont find any error messages.

Has other collegue the same problem. For any information pls. infor me.

Thanks

Evoco

Nachricht geändert durch evoco on 14.09.12 06:14:15 CDT
43 Replies
Highlighted

Re: HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

Hey, in your firewall, are you seeing any blocks? Also, try making a local loopback rule in your firewall policy 127.0.0.1 allowed inbound/outbound to all traffic, all services and ports.

Highlighted
Level 7
Report Inappropriate Content
Message 3 of 44

Re: HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

We had already the loopback in HIPS SP1 configured and it was running. We get this problem only since this update from patch 1 to patch 2.

In the firewall log we have only few blocked incoming igmp as activity and this event:

Event:  Traffic

IP Address/User:  FE80:0000:0000:0000:EA06:88FF:FECD:03AE

Message:  Blocked Incoming ICMPv6 Neighbor Advertisement - Source FE80:0000:0000:0000:EA06:88FF:FECD:03AE   Destination FF02:0000:0000:0000:0000:0000:0000:0001

Matched Rule:  Block All Traffic

In the firesvc.log i can see a lot of following entrys:

09/14/2012 13:15:33 NipsMessaging.cpp[98] ERROR    (3620) NimQ - Unexpected mac address value

09/14/2012 13:16:33 NipsMessaging.cpp[98] ERROR    (3620) NimQ - Unexpected mac address value

09/14/2012 13:16:33 NipsMessaging.cpp[98] ERROR    (3620) NimQ - Unexpected mac address value

Do you have any idea

Highlighted

Re: HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

hmm that unexpected mac address value error is odd. are you running dual NICs?

Highlighted
Level 7
Report Inappropriate Content
Message 5 of 44

Re: HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

no its running not dual but is a notbook and has more nics. Only one NIC is active and communicate.

Highlighted

Re: HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

Have a look at my thread: https://community.mcafee.com/thread/48467?tstart=0

I have similar issues with firesvc.exe using CPU and connectivity issues using P2.

Highlighted
Level 7
Report Inappropriate Content
Message 7 of 44

Re: HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

Hi Jeff we have absolutly same issue.

The problems comes if they switch to a wireless network and the next issue is the machines get hot and a time they so hot that shutdown the notebook.

We have this problem by all HP Elitebooks with intel core i5 and i7 and WIndows 7 x64

Do you have any idea?

Nachricht geändert durch evoco on 18.09.12 07:47:53 CDT
Highlighted

Re: HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

The machines I experience this on are i7's and an older Core2duo, Win7 x64 in all cases. 2 different wireless nics...intel Centrino Ultimate N and the other is a Dell broadcom based nic.

I haven't been able to pinpoint what triggers it yet as I don't have enough time right now to do so, which is why I haven't opened an SR either.

Highlighted
Level 7
Report Inappropriate Content
Message 9 of 44

Re: HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

I have open a mcafee case and hope for response. In the moment my workaround is to disable the mcafee firewall 😞

Nachricht geändert durch evoco on 18.09.12 08:53:34 CDT
Highlighted

Re: HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

Good to hear...if you are working with Bradley Gable on this, let him know he can reach out to me if he needs some further info. I just don't have the resources right now to do a full SR and the time it takes to gather info.

Thanks!

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community