Level Extreme platform
Subscription
Corporate profile
Products & Services
Support
Legal
Français
NETSTAT results - intrusion?
Message
From
20/08/2008 00:01:10
 
 
To
18/08/2008 03:41:16
General information
Forum:
Visual FoxPro
Category:
Troubleshooting
Environment versions
Visual FoxPro:
VFP 9 SP1
OS:
Windows XP SP2
Network:
Windows 2003 Server
Database:
Visual FoxPro
Miscellaneous
Thread ID:
01339452
Message ID:
01340294
Views:
11
Jos,

In addtition, I looked up port 27015. It is being used usually for a game called Half-Life - which I never played or installed in my machine. The other port number changes with every reboot.

Thanks!

Dennis

>>Hi Experts,
>>
>>I usually run NETSTAT at the DOS command prompt, with the '-a' option ( netstat -a ).
>>
>>The results have a coupe of lines which are 'disturbing'..
>>
>>
>>Active Connections
>>
>>  Proto  Local Address          Foreign Address        State
>>  TCP    dyl:epmap              dyl:0                  LISTENING
>>  TCP    dyl:microsoft-ds       dyl:0                  LISTENING
>>  TCP    dyl:990                dyl:0                  LISTENING
>>  TCP    dyl:1043               localhost:27015        ESTABLISHED
>>  TCP    dyl:5679               dyl:0                  LISTENING
>>  TCP    dyl:7438               dyl:0                  LISTENING
>>  TCP    dyl:27015              dyl:0                  LISTENING
>>  TCP    dyl:27015              localhost:1043         ESTABLISHED
>>  TCP    dyl:netbios-ssn        dyl:0                  LISTENING
>>  UDP    dyl:microsoft-ds       *:*
>>  UDP    dyl:isakmp             *:*
>>  UDP    dyl:1044               *:*
>>
>>
>>If you notice, there are two lines with ESTABLISHED states. What does this mean? This is so even without any network/internet connection.
>>
>>What should I do? Thanks for any help.
>>
>>Dennis
>
>Dennis,
>
>The two established connections are to your own computer as identified by "localhost". The localhost means "this computer" and has IP 127.0.0.1. You will also notice that the two established connections loop back to each other via the port numbers. I suspect this is probably ok but you could investigate further to see what process / program specifically is using these ports. See also - http://en.wikipedia.org/wiki/Localhost
Previous
Next
Reply
Map
View

Click here to load this message in the networking platform