Re: What's opening these connections?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Gino (cosine_at_covad.net)
Date: 02/04/04 

Date: Wed, 4 Feb 2004 11:32:35 -0500

Use netstat -o this will give you the process ID that is related to the
local port number. Then goto Taskmanger> Processes (sometimes you have to
add the PID column, VIEW menu> OPTIONS) and see what executable is related
to the PID, then do a search for it and check who's EXE it is in properties.

"Harry" <a@abc.com> wrote in message
news:%23IGbmfz6DHA.1428@TK2MSFTNGP12.phx.gbl...
> Not sure what group this should be posted to so appologies in advance!
>
> Running ie 5.5 (sp2)
>
> I wonder if anybody can shed some light on this problem. My PC seems to be
> opening connections randomly to various port no's
>
> Some netstat results (p1900 is name of my PC as if you wouldn't know that
> anyway!) -
>
> So after system reboot -
>
> Active Connections
>
> Proto Local Address Foreign Address State
>
> After reboot & One browser window open at www.google.com
>
> Active Connections
>
> Proto Local Address Foreign Address State
> TCP p1900:1027 p1900:1031 ESTABLISHED
> TCP p1900:1027 p1900:1034 ESTABLISHED
> TCP p1900:1031 p1900:1027 ESTABLISHED
> TCP p1900:1034 p1900:1027 ESTABLISHED
> TCP p1900:1032 66.102.11.99:http ESTABLISHED
> TCP p1900:1035 216.239.59.104:http ESTABLISHED
>
> Port no's are not always consistant, for example close & reopen browser -
>
> Active Connections
>
> Proto Local Address Foreign Address State
> TCP p1900:1027 p1900:1039 ESTABLISHED
> TCP p1900:1027 p1900:1041 ESTABLISHED
> TCP p1900:1039 p1900:1027 ESTABLISHED
> TCP p1900:1041 p1900:1027 ESTABLISHED
> TCP p1900:1040 66.102.11.99:http ESTABLISHED
> TCP p1900:1042 216.239.59.104:http ESTABLISHED
>
> I have no idea why? - closing anti-virus (pc-cillin + firewall), spyweeper
&
> anything else network related i.e Oracle, doesn't make any difference!
>
> System has been virus checked, de-spywared loads of times so it's highly
> unlikely its one of those?
>
> Please has anyone any ideas as to what might be causing this?
>
> many thanks
>
> harry
>
>
>

Relevant Pages

  • RE: iptables rule for sshd
    ... I have also configured the sshd_config file so that the sshd binds to ... *.22 local port when I see it with netstat. ... Some things there with the damn ssh configuration. ...
    (Debian-User)
  • Re: Whats opening these connections?
    ... > local port number. ... Then goto Taskmanger> Processes (sometimes you have to ... > add the PID column, VIEW menu> OPTIONS) and see what executable is related ... >> Active Connections ...
    (microsoft.public.windows.server.networking)
  • Re: [OT] is this dns ok?
    ... >quelli che mi ha dato tin.it ... if I push button for downland rosasm netstat says ... Active Connections ... Route Table ...
    (alt.lang.asm)
  • Re: SSHd Problem
    ... > I have also configured the sshd_config file so that the sshd binds to ... > *.22 local port when I see it with netstat. ... are you using the SSH daemon from www.ssh.com or the one ...
    (Debian-User)
  • Rextricting users
    ... > I have also configured the sshd_config file so that the sshd binds to ... > *.22 local port when I see it with netstat. ... are you using the SSH daemon from www.ssh.com or the one ...
    (Debian-User)