Re: Win2k Netstat sockets interpretation
- From: warf <warf@xxxxxxxxxxx>
- Date: Sun, 04 Feb 2007 03:32:23 GMT
Sebastian Gottschalk wrote:
warf wrote:snip....
Sebastian Gottschalk wrote:warf wrote:
I have been trying to learn as much as I can about internet 'security'
Ehm... now why don't you grap TcpView?
I have It Sebastian, while useful it appears to yield a subsection of what Spybot S&D 'processtool' coughs up. And S&D lists modules and process's. etc...
I am reading the win2k manual and it explains the difference between application 'ports', sockets[winsock] and the various protocals layered within. I am getting a 'better' picture of the hiearchy.
I am still confused by 'NETBUI'[not NETBIOS, that I understand is simply a file/print sharing protocal yes?] Even when I have 'SERVER', FILE PRINT SHARING, REMOTE ACCESS services disabled I still see NETBUI ports 136,137,138,139,445 'listening in TCPVIEW and S&D Processes???
Then enthereal shows NETBUI "name lookup" traffic...is this the DHCP IP renewal server contacting my cable ISP to register my IP?
I ask becasue in an effort to disable all 'REmote access' I ineveitably loose DNS Lookup or something that can't be restored short of an OS REPAIR install...and that gets tiring..."wipe and rebuild"
Eastlink is very coy and stingy with 'what services and ports I require'
As a client you don't require any services at al l.
As a Cable modem customer placed directly on the Inet backbone if I block ALL servers via ZA I loose DNSlookup, autoupdates and I can't restore it easilly...
Most of the W2K essential services [services.msc] are hard to ascertain for HTTP internet browsing, pop/smtp and newsgroups...for eg: REMOTE ACCESS CONNECTION MGR....seems to imply "I am a server" if allowed to start automaticly....but DHCP fails because NETBUI is innactivated If I disable it in SERVices.msc
I'll get it someday.
I sure wish that link you sent me was in English as well as German...se la gar.
Warf.
.
- Prev by Date: Re: thawte certs
- Next by Date: Google Picasa & Photo Sharing
- Previous by thread: Re: thawte certs
- Next by thread: Re: Clarification-Win2k Netstat sockets interpretation
- Index(es):
Relevant Pages
|
