cancel
Showing results for 
Search instead for 
Did you mean: 
evoco
Level 7

HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

Dear all,

we have the following problem since the update from HIPS 8 PATCH 1 to hips HIPS 8 PATCH 2.

After login and 5 - 7 Minutes the firesvc.exe use CPU30 % and blocked connection.

The firewall is active but it was active with HIPS 8 PATCH 1.

I dont find any error messages.

Has other collegue the same problem. For any information pls. infor me.

Thanks

Evoco

Nachricht geändert durch evoco on 14.09.12 06:14:15 CDT
0 Kudos
43 Replies
greatscott
Level 12

Re: HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

Hey, in your firewall, are you seeing any blocks? Also, try making a local loopback rule in your firewall policy 127.0.0.1 allowed inbound/outbound to all traffic, all services and ports.

0 Kudos
evoco
Level 7

Re: HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

We had already the loopback in HIPS SP1 configured and it was running. We get this problem only since this update from patch 1 to patch 2.

In the firewall log we have only few blocked incoming igmp as activity and this event:

Event:  Traffic

IP Address/User:  FE80:0000:0000:0000:EA06:88FF:FECD:03AE

Message:  Blocked Incoming ICMPv6 Neighbor Advertisement - Source FE80:0000:0000:0000:EA06:88FF:FECD:03AE   Destination FF02:0000:0000:0000:0000:0000:0000:0001

Matched Rule:  Block All Traffic

In the firesvc.log i can see a lot of following entrys:

09/14/2012 13:15:33 NipsMessaging.cpp[98] ERROR    (3620) NimQ - Unexpected mac address value

09/14/2012 13:16:33 NipsMessaging.cpp[98] ERROR    (3620) NimQ - Unexpected mac address value

09/14/2012 13:16:33 NipsMessaging.cpp[98] ERROR    (3620) NimQ - Unexpected mac address value

Do you have any idea

0 Kudos
greatscott
Level 12

Re: HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

hmm that unexpected mac address value error is odd. are you running dual NICs?

0 Kudos
evoco
Level 7

Re: HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

no its running not dual but is a notbook and has more nics. Only one NIC is active and communicate.

0 Kudos
JeffGerard
Level 10

Re: HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

Have a look at my thread: https://community.mcafee.com/thread/48467?tstart=0

I have similar issues with firesvc.exe using CPU and connectivity issues using P2.

0 Kudos
evoco
Level 7

Re: HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

Hi Jeff we have absolutly same issue.

The problems comes if they switch to a wireless network and the next issue is the machines get hot and a time they so hot that shutdown the notebook.

We have this problem by all HP Elitebooks with intel core i5 and i7 and WIndows 7 x64

Do you have any idea?

Nachricht geändert durch evoco on 18.09.12 07:47:53 CDT
0 Kudos
JeffGerard
Level 10

Re: HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

The machines I experience this on are i7's and an older Core2duo, Win7 x64 in all cases. 2 different wireless nics...intel Centrino Ultimate N and the other is a Dell broadcom based nic.

I haven't been able to pinpoint what triggers it yet as I don't have enough time right now to do so, which is why I haven't opened an SR either.

0 Kudos
evoco
Level 7

Re: HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

I have open a mcafee case and hope for response. In the moment my workaround is to disable the mcafee firewall :-(

Nachricht geändert durch evoco on 18.09.12 08:53:34 CDT
0 Kudos
JeffGerard
Level 10

Re: HIPS 8 PATCH 2 (8.0.0.2151) firesvc.exe (CPU30 %) and blocked connection & client freeze

Good to hear...if you are working with Bradley Gable on this, let him know he can reach out to me if he needs some further info. I just don't have the resources right now to do a full SR and the time it takes to gather info.

Thanks!

0 Kudos