Re: Find Out Which Program Is Using Internet Connection

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Jay Chan (jaykchan_at_hotmail.com)
Date: 07/13/04 

Date: 12 Jul 2004 19:28:46 -0700

> Another low tech way you can use to see what program is connecting is to
> open a Command Prompt window and using the command "netstat"

Thanks for the suggestion of using "netstat". But I don't quite
understand the info that "netstat" presented. Would you please help me
with understanding the info from "netstat".

"netstat" shows this message when I have established an internet
connection:

  Active Connections

    Proto Local Address Foreign Address State
    TCP Dell4300:3020 unknown.Level3.net:http ESTABLISHED
    TCP Dell4300:3021 unknown.Level3.net:http ESTABLISHED
    TCP Dell4300:3022
a209-247-153-134.deploy.akamaitechnologies.com:http ESTABLISHED
    TCP Dell4300:3008 localhost:8128 ESTABLISHED
    TCP Dell4300:3009 localhost:8139 ESTABLISHED
    TCP Dell4300:3017 localhost:3018 ESTABLISHED
    TCP Dell4300:3018 localhost:3017 ESTABLISHED
    TCP Dell4300:8128 localhost:3008 ESTABLISHED
    TCP Dell4300:8139 localhost:3009 ESTABLISHED

"netstat" shows this message when I have disconnected the internet
connection:

  Active Connections

    Proto Local Address Foreign Address State
    TCP Dell4300:3073 206.204.52.6:http TIME_WAIT
    TCP Dell4300:3075 206.204.52.6:http TIME_WAIT
    TCP Dell4300:3008 localhost:8128 ESTABLISHED
    TCP Dell4300:3009 localhost:8139 ESTABLISHED
    TCP Dell4300:8128 localhost:3008 ESTABLISHED
    TCP Dell4300:8139 localhost:3009 ESTABLISHED

I guess the "localhost" is OK. But what's about those foreign
addresses?

Thanks.

Jay Chan

Relevant Pages

  • ppp interruption
    ... Problem with maintaining the internet connection: on startup I do: ... Routing tables ... following netstat -rn printout: ...
    (freebsd-questions)
  • Re: ppp interruption
    ... Problem with maintaining the internet connection: on startup I do: ... Routing tables ... I get the following netstat -rn printout: ...
    (freebsd-questions)
  • Re: Sendmail says No, But netstat says Yes
    ... connection from ever taking place and thus never be reported by netstat. ... When I blocked the machines in question, ... Why didn't tcp wrapping work? ...
    (comp.mail.sendmail)
  • How to troubleshoot this?
    ... The address appears to belong to GoDaddy. ... The only strange thing I see in netstat is a number of processes ... (I happen to pick ssh as I have only one connection, character-based, ... not a question on ssh operation, just an example of the weird ...
    (comp.os.linux.networking)
  • Re: What is going on with my Dialup?
    ... watching the lights on an external modem and they are revealing some ... OTHER THAN THAT, your connection ... Let's start by not using a browser. ... Figure out where the command line is, and run 'netstat -anptu' and see ...
    (comp.os.linux.networking)