Re: Checking Port Activity with TCPView shows a lot of sqlservr.exe TIME_WAIT
From: Vincent Mouton (vincentnospamsoremovethistomailme_at_marlonpointandthenbe.com)
Date: 04/28/04
- Next message: Roger Abell: "Re: IIS permissions error sporadically occurs"
- Previous message: Keith W. McCammon: "Re: Checking Port Activity with TCPView shows a lot of sqlservr.exe TIME_WAIT"
- In reply to: Keith W. McCammon: "Re: Checking Port Activity with TCPView shows a lot of sqlservr.exe TIME_WAIT"
- Next in thread: Eric Chamberlain: "Re: Checking Port Activity with TCPView shows a lot of sqlservr.exe TIME_WAIT"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 28 Apr 2004 16:46:44 +0200
Hi,
that webserver runs an SQL server. All applications that need that SQL
Server run on the webserver itself. We only connect to it from our office
PC's with client tools like Query Analyzer, etc. No other clients, no other
web servers connect to that Server, nor does it connect to other outside
servers.
I will check with our hosting provider on this.
Does the data I gave mean what i thought: attempts to break in?
Thank you,
Vincent
"Keith W. McCammon" <km@km.com> wrote in message
news:eUqqh6SLEHA.3016@tk2msftngp13.phx.gbl...
> If your SQL server is connected to any host outside of your local network,
> your firewall is horribly misconfigured. There's no reason for this.
>
> "msnews.microsoft.com"
> <vincentnospamsoremovethistomailme@marlonpointandthenbe.com> wrote in
> message news:u$dNnMRLEHA.1416@TK2MSFTNGP09.phx.gbl...
> > Hi,
> >
> > I used TCPView (http://www.sysinternals.com/ntw2k/source/tcpview.shtml)
on
> a
> > Windows 2003 server, used as a webserver. The server is behind a
firewall.
> > I saw a lot of entries like:
> >
> > sqlservr.exe:1928 TCP 2colt397:ms-sql-s
> > rrcs-se-24-73-127-66.biz.rr.com:15628 TIME_WAIT
> > or
> > sqlservr.exe:1928 TCP 2colt397:ms-sql-s
> > rrcs-se-24-73-127-66.biz.rr.com:15628 SYN_RCVD
> >
> >
> > Is this a domain trying to find an open port to break in? What does the
> > TIME_WAIT part mean? Do I have to get worried or is this not that
strange?
> >
> > Thank you for your advice,
> > Vincent
> >
> >
> >
>
>
- Next message: Roger Abell: "Re: IIS permissions error sporadically occurs"
- Previous message: Keith W. McCammon: "Re: Checking Port Activity with TCPView shows a lot of sqlservr.exe TIME_WAIT"
- In reply to: Keith W. McCammon: "Re: Checking Port Activity with TCPView shows a lot of sqlservr.exe TIME_WAIT"
- Next in thread: Eric Chamberlain: "Re: Checking Port Activity with TCPView shows a lot of sqlservr.exe TIME_WAIT"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
