[python-win32] unusual network load when querying a remote registry over wmi

Tim Golden mail at timgolden.me.uk
Fri Feb 5 10:23:12 CET 2010


On 04/02/2010 12:10, Eli Sandler wrote:
> Here a sample of the captured stream, from somewhere at the relative beginning.
>
>
> %......
> ......'`.......=.W................5.....#M..Y.........User
> .......
> ...S.t.d.R.e.g.P.r.o.v.User............G.e.t.S.t.r.i.n.g.V.a.l.u.e.............{...{...MEOW.........s...M...K.$...E:........K.$....K...xV4.C.....EXCHANGE-SER..ROOT\Default...................................................
> ..........................*...........C....................o...|....__PARAMETERS..abstract....................hDefKey..uint32...................
> ........3....IN...................
> ........3...Z...........ID...............)...
> ............Z........................uint32....................sSubKeyName..string...................
> .............IN...................
> ........................ID...............)...
> ........z..............?.............string....................sValueName..string...................
> .............in...................
> ........................ID...............)...
> ........0............................string..SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook..DisplayName..SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Branding..DisplayName..SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager..DisplayName..SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DirectAnimation..DisplayName..SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx..DisplayName..SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DXM_Runtime..DisplayName..SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F95DE19F-CF69-4b03-81B6-9EC050D20D3B..DisplayName ...
>
> As you can see the string at the end contains the previous strings.

I'm probably missing something obvious, but I can't see the
duplication you mention. You're obviously seeing a list of
registry key locations, each one naturally containing its
own full path. But that's whad I'd expect at least. Have I
misunderstood you?

TJG


More information about the python-win32 mailing list