A Broadband and ADSL forum. BroadbanterBanter

Welcome to BroadbanterBanter.

You are currently viewing as a guest which gives you limited access to view most discussions and other FREE features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload your own photos and access many other special features. Registration is fast, simple and absolutely free so please, join our community today.

Go Back   Home » BroadbanterBanter forum » Newsgroup Discussions » uk.telecom.broadband (UK broadband)
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

uk.telecom.broadband (UK broadband) (uk.telecom.broadband) Discussion of broadband services, technology and equipment as provided in the UK. Discussions of specific services based on ADSL, cable modems or other broadband technology are also on-topic. Advertising is not allowed.

Odd connections



 
 
Thread Tools Display Modes
  #1  
Old April 6th 04, 09:45 PM posted to uk.telecom.broadband
monkeying......
external usenet poster
 
Posts: 20
Default Odd connections

Hi all,

Dunno if anyone will have any ideas on this....i was looking at netstat and
found a shedload of connections.....to me???? -

TCP Laptop:1027 Laptop:4749 ESTABLISHED
TCP Laptop:1027 Laptop:4785 FIN_WAIT_2
TCP Laptop:1027 Laptop:4787 ESTABLISHED
TCP Laptop:1027 Laptop:4795 TIME_WAIT
TCP Laptop:1027 Laptop:4797 TIME_WAIT
TCP Laptop:1030 Laptop:1031 ESTABLISHED
TCP Laptop:1031 Laptop:1030 ESTABLISHED
TCP Laptop:3495 Laptop:1027 CLOSE_WAIT
TCP Laptop:4749 Laptop:1027 ESTABLISHED
TCP Laptop:4758 Laptop:1027 CLOSE_WAIT
TCP Laptop:4760 Laptop:1027 CLOSE_WAIT
TCP Laptop:4762 Laptop:1027 CLOSE_WAIT
TCP Laptop:4764 Laptop:1027 CLOSE_WAIT
TCP Laptop:4785 Laptop:1027 CLOSE_WAIT
TCP Laptop:4787 Laptop:1027 ESTABLISHED
TCP Laptop:4791 Laptop:8000 ESTABLISHED
TCP Laptop:8000 Laptop:4791 ESTABLISHED

Any guesses?

Cheers


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.647 / Virus Database: 414 - Release Date: 29/03/2004


  #2  
Old April 6th 04, 10:22 PM posted to uk.telecom.broadband
Lawrence Stromski
external usenet poster
 
Posts: 35
Default Odd connections

Port 1027 is officially reserved for ExoSee (http://www.exosee.com/ - ExoSee
peer-to-peer file sharing software) Occasionally you get some naughty
programs that use ports they haven't officially been assigned by IANA.
(Officially registered ports with the IANA:
ftp://ftp.iana.org/assignments/port-numbers )


To confirm:
At your prompt (depending on your OS, 2000/XP/2003 only) do: netstat -a -o

The right-hand most column will display a PID number 1-4 digits long.
Open task manager (ctrl+alt+del),
Choose the processes tab,
Choose View Menu Select Columns...
Tick PID (Process Identifiation) to add that to your current view

Now, all you have to do is match up the PID number shown in your DOS box to
the PID number shown in task manager and you'll be able to see what program
is opening that port.

If it's SVCHOST.EXE, that means it's a Windows service in your Computer
Manager Services console thats making that connection.



-Lawrence.



"monkeying......" wrote in message
news:[email protected]
Hi all,

Dunno if anyone will have any ideas on this....i was looking at netstat

and
found a shedload of connections.....to me???? -

TCP Laptop:1027 Laptop:4749 ESTABLISHED
TCP Laptop:1027 Laptop:4785 FIN_WAIT_2
TCP Laptop:1027 Laptop:4787 ESTABLISHED
TCP Laptop:1027 Laptop:4795 TIME_WAIT
TCP Laptop:1027 Laptop:4797 TIME_WAIT
TCP Laptop:1030 Laptop:1031 ESTABLISHED
TCP Laptop:1031 Laptop:1030 ESTABLISHED
TCP Laptop:3495 Laptop:1027 CLOSE_WAIT
TCP Laptop:4749 Laptop:1027 ESTABLISHED
TCP Laptop:4758 Laptop:1027 CLOSE_WAIT
TCP Laptop:4760 Laptop:1027 CLOSE_WAIT
TCP Laptop:4762 Laptop:1027 CLOSE_WAIT
TCP Laptop:4764 Laptop:1027 CLOSE_WAIT
TCP Laptop:4785 Laptop:1027 CLOSE_WAIT
TCP Laptop:4787 Laptop:1027 ESTABLISHED
TCP Laptop:4791 Laptop:8000 ESTABLISHED
TCP Laptop:8000 Laptop:4791 ESTABLISHED

Any guesses?

Cheers


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.647 / Virus Database: 414 - Release Date: 29/03/2004




  #3  
Old April 6th 04, 10:34 PM posted to uk.telecom.broadband
monkeying......
external usenet poster
 
Posts: 20
Default Odd connections


"Lawrence Stromski" wrote in message
...
Port 1027 is officially reserved for ExoSee (http://www.exosee.com/ -

ExoSee
peer-to-peer file sharing software) Occasionally you get some naughty
programs that use ports they haven't officially been assigned by IANA.
(Officially registered ports with the IANA:
ftp://ftp.iana.org/assignments/port-numbers )


To confirm:
At your prompt (depending on your OS, 2000/XP/2003 only) do: netstat -a -o

The right-hand most column will display a PID number 1-4 digits long.
Open task manager (ctrl+alt+del),
Choose the processes tab,
Choose View Menu Select Columns...
Tick PID (Process Identifiation) to add that to your current view

Now, all you have to do is match up the PID number shown in your DOS box

to
the PID number shown in task manager and you'll be able to see what

program
is opening that port.

If it's SVCHOST.EXE, that means it's a Windows service in your Computer
Manager Services console thats making that connection.



-Lawrence.



"monkeying......" wrote in message
news:[email protected]
Hi all,

Dunno if anyone will have any ideas on this....i was looking at netstat

and
found a shedload of connections.....to me???? -

TCP Laptop:1027 Laptop:4749 ESTABLISHED
TCP Laptop:1027 Laptop:4785 FIN_WAIT_2
TCP Laptop:1027 Laptop:4787 ESTABLISHED
TCP Laptop:1027 Laptop:4795 TIME_WAIT
TCP Laptop:1027 Laptop:4797 TIME_WAIT
TCP Laptop:1030 Laptop:1031 ESTABLISHED
TCP Laptop:1031 Laptop:1030 ESTABLISHED
TCP Laptop:3495 Laptop:1027 CLOSE_WAIT
TCP Laptop:4749 Laptop:1027 ESTABLISHED
TCP Laptop:4758 Laptop:1027 CLOSE_WAIT
TCP Laptop:4760 Laptop:1027 CLOSE_WAIT
TCP Laptop:4762 Laptop:1027 CLOSE_WAIT
TCP Laptop:4764 Laptop:1027 CLOSE_WAIT
TCP Laptop:4785 Laptop:1027 CLOSE_WAIT
TCP Laptop:4787 Laptop:1027 ESTABLISHED
TCP Laptop:4791 Laptop:8000 ESTABLISHED
TCP Laptop:8000 Laptop:4791 ESTABLISHED

Any guesses?

Cheers


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.647 / Virus Database: 414 - Release Date: 29/03/2004




Thanks for that......paranoid? me?


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.647 / Virus Database: 414 - Release Date: 29/03/2004


  #4  
Old April 6th 04, 11:17 PM posted to uk.telecom.broadband
Lawrence Stromski
external usenet poster
 
Posts: 35
Default Odd connections

If it is Local: Laptop to Remote: Laptop, you probably don't have anything
to worry about. It's the Local: Laptop to Remote:
microsofts.illegial.data.collection.server.microso ft.com you need to worry
about :-)


"monkeying......" wrote in message
...

"Lawrence Stromski" wrote in message
...
Port 1027 is officially reserved for ExoSee (http://www.exosee.com/ -

ExoSee
peer-to-peer file sharing software) Occasionally you get some naughty
programs that use ports they haven't officially been assigned by IANA.
(Officially registered ports with the IANA:
ftp://ftp.iana.org/assignments/port-numbers )


To confirm:
At your prompt (depending on your OS, 2000/XP/2003 only) do:

netstat -a -o

The right-hand most column will display a PID number 1-4 digits long.
Open task manager (ctrl+alt+del),
Choose the processes tab,
Choose View Menu Select Columns...
Tick PID (Process Identifiation) to add that to your current view

Now, all you have to do is match up the PID number shown in your DOS box

to
the PID number shown in task manager and you'll be able to see what

program
is opening that port.

If it's SVCHOST.EXE, that means it's a Windows service in your Computer
Manager Services console thats making that connection.



-Lawrence.



"monkeying......" wrote in message
news:[email protected]
Hi all,

Dunno if anyone will have any ideas on this....i was looking at

netstat
and
found a shedload of connections.....to me???? -

TCP Laptop:1027 Laptop:4749 ESTABLISHED
TCP Laptop:1027 Laptop:4785 FIN_WAIT_2
TCP Laptop:1027 Laptop:4787 ESTABLISHED
TCP Laptop:1027 Laptop:4795 TIME_WAIT
TCP Laptop:1027 Laptop:4797 TIME_WAIT
TCP Laptop:1030 Laptop:1031 ESTABLISHED
TCP Laptop:1031 Laptop:1030 ESTABLISHED
TCP Laptop:3495 Laptop:1027 CLOSE_WAIT
TCP Laptop:4749 Laptop:1027 ESTABLISHED
TCP Laptop:4758 Laptop:1027 CLOSE_WAIT
TCP Laptop:4760 Laptop:1027 CLOSE_WAIT
TCP Laptop:4762 Laptop:1027 CLOSE_WAIT
TCP Laptop:4764 Laptop:1027 CLOSE_WAIT
TCP Laptop:4785 Laptop:1027 CLOSE_WAIT
TCP Laptop:4787 Laptop:1027 ESTABLISHED
TCP Laptop:4791 Laptop:8000 ESTABLISHED
TCP Laptop:8000 Laptop:4791 ESTABLISHED

Any guesses?

Cheers


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.647 / Virus Database: 414 - Release Date: 29/03/2004




Thanks for that......paranoid? me?


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.647 / Virus Database: 414 - Release Date: 29/03/2004




 




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Shared BroadBand Internet Connections! ***** rob uk.telecom.broadband (UK broadband) 5 February 5th 04 11:30 AM
Router with 2 internet connections J.Neuhoff uk.telecom.broadband (UK broadband) 2 January 30th 04 10:40 PM
Routers / connections - 2 queries Alan uk.telecom.broadband (UK broadband) 2 October 3rd 03 02:19 PM
Pipex dropped connections MikeB2168 uk.telecom.broadband (UK broadband) 3 September 7th 03 11:27 PM
ADSL Connections, PPPoE, VPNs David Lee uk.telecom.broadband (UK broadband) 3 July 17th 03 05:46 PM


All times are GMT +1. The time now is 02:20 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.Content Relevant URLs by vBSEO 2.4.0
Copyright 2004-2019 BroadbanterBanter.
The comments are property of their posters.