Wow, IP hijacking attack?! The -proto 2 or -proto 3 has nothing to do with this BTW. If the attacker has spoofed the IP address of ethermine, there is nothing we can do (and the same goes for Claymore). Until the stratum protocol is encrypted or at least authenticated, these things can happen and the only defense is to check your stats from time to time. Please note that IP hijacking happens not on your machine or your network but on the routers of your ISP or even some of the backbone routers of the Internet, so there is nothing you can do to mitigate it. Fortunately, these things are rare but they will be on the rise with the increasing popularity of the crypto.

   The remote JSON protocol is the same as the one in Claymore dual miner but the logs are obviously different (the one shown by http://IP_ADDRESS:PORT). Probably the tool you are trying to use is parsing the logs to gather additional information and is "confused" because it expects the logs to be the same as Claymore's character-by-character. This is beyond the scope of compatibility we are willing to provide as we want to add even more information in the console. Hopefully, with the increasing of the popularity of PhonixMiner, more tool creators will add support for our miner as well.

   Check your OC settings (esp. core voltages) with something like GPU-z. The AMD drivers tend to "lose" some overclocking settings if the GPU is idle for some time but the Wattman still incorrectly shows the lower voltage. This will be fixed in 2.7b when we will finally provide hardware control setting integrated in the miner itself.

   If you are not trying to upload epools.txt or config.txt files with the Claymore remote manager, then someone is trying to "hijack" your miner via the remote control port. Fortunately, you haven't enabled the full mode, so this is not possible but the miner warns you that someone tries to upload file via the remote management socket.

   We will, definitely. It would take some time however, so bear with us.