-
July 12th, 2009, 05:58 PM
#1
Junior Member
loopbacks
I am trying to determine what is going on here, this is a netstat from my vista PC with google chrome, trillian and some tray apps running, that seems like a lot of loopback connections running there.
Microsoft Windows [Version 6.0.6001]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.
Active Connections
Proto Local Address Foreign Address State
TCP 127.0.0.1:12080 myPCname:60082 ESTABLISHED
TCP 127.0.0.1:12080 myPCname:61505 ESTABLISHED
TCP 127.0.0.1:12080 myPCname:63866 ESTABLISHED
TCP 127.0.0.1:12080 myPCname:63954 TIME_WAIT
TCP 127.0.0.1:12080 myPCname:63958 TIME_WAIT
TCP 127.0.0.1:12080 myPCname:63963 ESTABLISHED
TCP 127.0.0.1:27015 myPCname:61570 ESTABLISHED
TCP 127.0.0.1:60082 myPCname:12080 ESTABLISHED
TCP 127.0.0.1:61505 myPCname:12080 ESTABLISHED
TCP 127.0.0.1:61570 myPCname:27015 ESTABLISHED
TCP 127.0.0.1:63866 myPCname:12080 ESTABLISHED
TCP 127.0.0.1:63963 myPCname:12080 ESTABLISHED
TCP 192.168.0.134:49626 8.19.144.91:http CLOSE_WAIT
TCP 192.168.0.134:50852 a65-32-34-89:http CLOSE_WAIT
TCP 192.168.0.134:51845 cs103:5050 ESTABLISHED
TCP 192.168.0.134:58200 bos-m003a-sdr2:5190 ESTABLISHED
TCP 192.168.0.134:58219 205.188.8.84:5190 ESTABLISHED
TCP 192.168.0.134:58220 oam-d12b:5190 ESTABLISHED
TCP 192.168.0.134:60083 media:http ESTABLISHED
TCP 192.168.0.134:63910 65.55.21.250:http TIME_WAIT
TCP 192.168.0.134:63928 a65-32-34-131:http TIME_WAIT
TCP 192.168.0.134:63964 channel16:http ESTABLISHED
TCP 192.168.0.134:63965 www:http CLOSE_WAIT
TCP 192.168.0.134:63966 110:http CLOSE_WAIT
any idea whats up with all the loopbacks?
-
July 12th, 2009, 08:55 PM
#2
Just a quick guess..
27015 .. thats for Steam if I am not wrong.. do you play games powered by Steam ?
EDIT :
1. Saw on Avast forum (google search) that port 12080 is used by the HTTP scanner of the firewall of avast (proxy).. Do you use avast ?
Everything post port number 48152 are dynamic and used by app's.
2. Damn.. I don't know why i didn't give this as a soluton.. Assuming you're running some windows box.. type netstat -ao in the command prompt. You will the process that has opened the port.. SIMPLE !
Last edited by ByTeWrangler; July 12th, 2009 at 09:09 PM.
Parth Maniar,
CISSP, CISM, CISA, SSCP
*Thank you GOD*
Greater the Difficulty, SWEETER the Victory.
Believe in yourself.
-
July 13th, 2009, 01:55 AM
#3
Junior Member
Thanks!
You are right on 2 counts, steam and avast. The others I can lookup using the information you provided. Mucho gracias!
-
July 13th, 2009, 07:39 AM
#4
Parth Maniar,
CISSP, CISM, CISA, SSCP
*Thank you GOD*
Greater the Difficulty, SWEETER the Victory.
Believe in yourself.
-
July 13th, 2009, 02:33 PM
#5
Very nice! Never knew that parameter
The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
Albert Einstein
-
July 13th, 2009, 02:58 PM
#6
09:F9:11:02:9D:74:E3:5B 8:41:56:C5:63:56:88:C0
-
July 13th, 2009, 09:03 PM
#7
Or one better, netstat -anob
You don't have to ask what has it open
There is only one constant, one universal, it is the only real truth: causality. Action. Reaction. Cause and effect...There is no escape from it, we are forever slaves to it. Our only hope, our only peace is to understand it, to understand the 'why'. 'Why' is what separates us from them, you from me. 'Why' is the only real social power, without it you are powerless.
(Merovingian - Matrix Reloaded)
-
July 14th, 2009, 08:34 AM
#8
Better still, use
http://technet.microsoft.com/en-us/s.../bb897437.aspx
TCPView - Graphical UI ..
PS: Feels so good answering a BOFH !
Last edited by ByTeWrangler; July 14th, 2009 at 08:40 AM.
Parth Maniar,
CISSP, CISM, CISA, SSCP
*Thank you GOD*
Greater the Difficulty, SWEETER the Victory.
Believe in yourself.
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|