Results 1 to 8 of 8

Thread: loopbacks

  1. #1
    Junior Member
    Join Date
    Jul 2009
    Posts
    2

    loopbacks

    I am trying to determine what is going on here, this is a netstat from my vista PC with google chrome, trillian and some tray apps running, that seems like a lot of loopback connections running there.

    Microsoft Windows [Version 6.0.6001]
    Copyright (c) 2006 Microsoft Corporation. All rights reserved.



    Active Connections

    Proto Local Address Foreign Address State
    TCP 127.0.0.1:12080 myPCname:60082 ESTABLISHED
    TCP 127.0.0.1:12080 myPCname:61505 ESTABLISHED
    TCP 127.0.0.1:12080 myPCname:63866 ESTABLISHED
    TCP 127.0.0.1:12080 myPCname:63954 TIME_WAIT
    TCP 127.0.0.1:12080 myPCname:63958 TIME_WAIT
    TCP 127.0.0.1:12080 myPCname:63963 ESTABLISHED
    TCP 127.0.0.1:27015 myPCname:61570 ESTABLISHED
    TCP 127.0.0.1:60082 myPCname:12080 ESTABLISHED
    TCP 127.0.0.1:61505 myPCname:12080 ESTABLISHED
    TCP 127.0.0.1:61570 myPCname:27015 ESTABLISHED
    TCP 127.0.0.1:63866 myPCname:12080 ESTABLISHED
    TCP 127.0.0.1:63963 myPCname:12080 ESTABLISHED
    TCP 192.168.0.134:49626 8.19.144.91:http CLOSE_WAIT
    TCP 192.168.0.134:50852 a65-32-34-89:http CLOSE_WAIT
    TCP 192.168.0.134:51845 cs103:5050 ESTABLISHED
    TCP 192.168.0.134:58200 bos-m003a-sdr2:5190 ESTABLISHED
    TCP 192.168.0.134:58219 205.188.8.84:5190 ESTABLISHED
    TCP 192.168.0.134:58220 oam-d12b:5190 ESTABLISHED
    TCP 192.168.0.134:60083 media:http ESTABLISHED
    TCP 192.168.0.134:63910 65.55.21.250:http TIME_WAIT
    TCP 192.168.0.134:63928 a65-32-34-131:http TIME_WAIT
    TCP 192.168.0.134:63964 channel16:http ESTABLISHED
    TCP 192.168.0.134:63965 www:http CLOSE_WAIT
    TCP 192.168.0.134:63966 110:http CLOSE_WAIT

    any idea whats up with all the loopbacks?

  2. #2
    Just a quick guess..


    27015 .. thats for Steam if I am not wrong.. do you play games powered by Steam ?

    EDIT :

    1. Saw on Avast forum (google search) that port 12080 is used by the HTTP scanner of the firewall of avast (proxy).. Do you use avast ?

    Everything post port number 48152 are dynamic and used by app's.


    2. Damn.. I don't know why i didn't give this as a soluton.. Assuming you're running some windows box.. type netstat -ao in the command prompt. You will the process that has opened the port.. SIMPLE !
    Last edited by ByTeWrangler; July 12th, 2009 at 09:09 PM.
    Parth Maniar,
    CISSP, CISM, CISA, SSCP

    *Thank you GOD*

    Greater the Difficulty, SWEETER the Victory.

    Believe in yourself.

  3. #3
    Junior Member
    Join Date
    Jul 2009
    Posts
    2
    Thanks!

    You are right on 2 counts, steam and avast. The others I can lookup using the information you provided. Mucho gracias!

  4. #4
    No problem mate..
    Parth Maniar,
    CISSP, CISM, CISA, SSCP

    *Thank you GOD*

    Greater the Difficulty, SWEETER the Victory.

    Believe in yourself.

  5. #5
    Only african to own a PC! Cider's Avatar
    Join Date
    Jun 2003
    Location
    Israel
    Posts
    1,683
    netstat -ao
    Very nice! Never knew that parameter
    The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
    Albert Einstein

  6. #6
    THE Bastard Sys***** dinowuff's Avatar
    Join Date
    Jun 2003
    Location
    Third planet from the Sun
    Posts
    1,253
    netstat -aon Even better
    09:F9:11:02:9D:74:E3:5B8:41:56:C5:63:56:88:C0

  7. #7
    Jaded Network Admin nebulus200's Avatar
    Join Date
    Jun 2002
    Posts
    1,356
    Or one better, netstat -anob

    You don't have to ask what has it open
    There is only one constant, one universal, it is the only real truth: causality. Action. Reaction. Cause and effect...There is no escape from it, we are forever slaves to it. Our only hope, our only peace is to understand it, to understand the 'why'. 'Why' is what separates us from them, you from me. 'Why' is the only real social power, without it you are powerless.

    (Merovingian - Matrix Reloaded)

  8. #8
    Better still, use

    http://technet.microsoft.com/en-us/s.../bb897437.aspx

    TCPView - Graphical UI ..


    PS: Feels so good answering a BOFH !
    Last edited by ByTeWrangler; July 14th, 2009 at 08:40 AM.
    Parth Maniar,
    CISSP, CISM, CISA, SSCP

    *Thank you GOD*

    Greater the Difficulty, SWEETER the Victory.

    Believe in yourself.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •