Re: Denied Connection In ISA Logs?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Hi Joe

Thanks for the NETSTAT suggestion. I suspected the application that NETSTAT
found but it was good to confirm it by using this tool. I discovered the
application was a Media Player helper application named View Point. Here is
some information on it for whom ever is interested.
http://www.viewpoint.com/installer/v4/html/vmp_faq.html. There was never
anything getting out from this workstation because ISA was denying the
connection to deploy.akamaitechnologies.com. At least the app won't be using
resources trying to do something that it wasn't able to accomplish!

Active Connections

Proto Local Address Foreign Address State PID
TCP STATION01:2691 a72-247-29-138.deploy.akamaitechnologies.com:https
SYN_SENT 2712
[ViewMgr.exe]

Thanks
Jeff


"Joe" <joe@xxxxxxxxxxxxxx> wrote in message
news:OM8L5IN7HHA.1184@xxxxxxxxxxxxxxxxxxxxxxx
Jeff Teel wrote:
I'm guessing it's a piece of trial software that is on the workstation
that is doing it. I'll have to start weeding through to see if I can find
the culprit! I continued to watch ISA for awhile longer and the attempts
have stopped for around 40 minuets now. I haven't done anything to the
WS.


If you can catch it in the act, presumably the rogue process will wait a
while before it decides there's not going to be a reply. Probably you
have time for a netstat to identify the executable.


.

Relevant Pages

  • Re: Whats opening these connections?
    ... Use netstat -o this will give you the process ID that is related to the ... local port number. ... > So after system reboot - ... > Active Connections ...
    (microsoft.public.windows.server.networking)
  • Re: [OT] is this dns ok?
    ... >quelli che mi ha dato tin.it ... if I push button for downland rosasm netstat says ... Active Connections ... Route Table ...
    (alt.lang.asm)
  • Re: netstat
    ... jaybee wrote: ... > Active Connections ... > A minute or so later, I ran netstat again and the line above was gone. ... Thor ...
    (comp.os.ms-windows.nt.admin.security)