I maybe late to this thread but, I have done extensive sniffing of network traffic on Mac's. It turns out that Microsoft Office products generally send out a multicast message when they start up. I haven't noticed anything when they shut down, however. I believe that this is a poor man's approach (never applied that to Microsoft or BillG before) to doing 'license management' in that other Office products would presummably listen on for that broadcast address and compare license number info in the incoming packets and then issue a warning to the user(s) and then quit....

Is this what you are seeing?

  aps.


Begin forwarded message:

From: "Todd McKerchar" <[EMAIL PROTECTED]>
Date: June 24, 2005 8:00:19 AM PDT
To: <[email protected]>
Subject: Re: [Littlesnitch-talk] (no subject)
Reply-To: <[email protected]>


Thanks Peter. I had not seen the Microsoft Office messages on close until recently. I think I noticed it when I clean upgraded to Tiger, which deleted my previous rules. Perhaps I had previously created rules that suppressed the messages, but I don't remember doing so. I also updated to "Office 2004 for Student" about the same time I did a Tiger install, I can't remember exactly.

My copies are legal so that should not be an issue. At any rate, I fixed the Office messages problem by following Michael's recommendation to create rules that block the TCP protocol for the server.

Regarding your network printer messages, I'm not sure. I've never encountered anything like that. I'm assuming this is a LittleSnitch message?

Todd

On Jun 24, 2005, at 9:37 AM, Peter Schaff wrote:

FWIW: I'm running 2 legal copies of OfficeX on an iMac and a PM over an Asante network. On the iMac when I quit it gives me a quick "connecting to printer" message. It's fast, so I'm not positive of the text. On the PM I never have seen this, but may be just because it's faster. I rarely use Little Snitch as I'm still running the demo version (Sorry! Just haven't gotten to it yet) and seldom reboot.

I've always been puzzled by the message as I don't use a network printer, but print through the PM USB.

Hmmm, just ran little switch, then quit Word on the iMac and no message at all, nor complaint from LS. Strange.

  - Peter

_______________________________________________
Littlesnitch-talk mailing list
[email protected]
http://at.obdev.at/mailman/listinfo/littlesnitch-talk

Reply via email to