Re: TCP Connection - Established

From: Oli Restorick [MVP] (oli_at_mvps.org)
Date: 01/31/04 

Date: Sat, 31 Jan 2004 13:25:13 -0000

Just for any Windows XP and Windows Server 2003 folk who may be reading,
there's a new -o switch in netstat that will tell you which process is
responsible for each row of the output.

Oli

"jmkanes" <jmkanes@somewhere.com> wrote in message
news:MPG.1a84ce0a509bfb19989683@news.telusplanet.net...
> In article <c7ESb.147041$5V2.785271@attbi_s53>, n9rou@n0spam-comcast.net
> says...
> > Port 1525 tcp is shown as used by Oracle applications in some port
charts.
> > Downloading and using TCPView from SysInternals will help by mapping
ports to
> > process/application and right clinking the process will give more
information.
> > If you have not done a spyware/parasite scan you may also want to do
that as it
> > could be spyware. SpyBot Search and Destroy in advanced mode/tools also
will
> > show processes and startup applications that may also shed some light on
what
> > the mystery port usage is. I believe Sygate may even be able to map
ports to
> > processes and has a traceback function via the logs. It definitely looks
like a
> > connection to an external address because of the address
7.33.111.82. ---
> > Steve
> >
> > http://www.sysinternals.com/ntw2k/source/tcpview.shtml
> > http://www.safer-networking.org/
> >
>
> Thanks Steve. I got a copy of TCPView and used it to identify the
> process involved. It's the firewall! Sygate personal firewall pro.
>
> Hmmm. I will try to contact Sygate and get their explanation. When I
> get it I will let you know what it was.
>
> Strange stuff.
>
> Thanks again.
>
> John.

Relevant Pages

  • Re: What ports to block and how?
    ... > I'm using xp pro and Sygate personal firewall 5.5. ... > came across some posts that mentioned the ports to block and the ...
    (comp.security.firewalls)
  • Configuring Sygate Firewall Rules
    ... Sygate Personal Firewall 4.2 ... use the advanced rules to block all incoming TCP & UDP connections to the ... pre-defined ports 0-1023. ...
    (comp.security.misc)
  • Configuring Sygate Firewall Rules
    ... Sygate Personal Firewall 4.2 ... use the advanced rules to block all incoming TCP & UDP connections to the ... pre-defined ports 0-1023. ...
    (comp.security.firewalls)
  • Re: Firewall Sygate
    ... you look at what's running on that machine and listening on those ports. ... If you get a popup for Services.Exe then just Deny it and tell Sygate to ... Outgoing apps will use any number of local ports in the 1024-5000 range. ...
    (comp.security.firewalls)
  • Re: A poor mans activity check :)
    ... >The only free firewall that hasn't given me problems with my new DSL ... I've found Sygate to be exactly what I need and want, ... >>default your ports are always open, ... have any server running on those ports. ...
    (comp.security.firewalls)