loopbacks

Printable View

July 12th, 2009, 05:58 PM
pcguy

loopbacks

I am trying to determine what is going on here, this is a netstat from my vista PC with google chrome, trillian and some tray apps running, that seems like a lot of loopback connections running there.

Microsoft Windows [Version 6.0.6001]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

Active Connections

Proto Local Address Foreign Address State
TCP 127.0.0.1:12080 myPCname:60082 ESTABLISHED
TCP 127.0.0.1:12080 myPCname:61505 ESTABLISHED
TCP 127.0.0.1:12080 myPCname:63866 ESTABLISHED
TCP 127.0.0.1:12080 myPCname:63954 TIME_WAIT
TCP 127.0.0.1:12080 myPCname:63958 TIME_WAIT
TCP 127.0.0.1:12080 myPCname:63963 ESTABLISHED
TCP 127.0.0.1:27015 myPCname:61570 ESTABLISHED
TCP 127.0.0.1:60082 myPCname:12080 ESTABLISHED
TCP 127.0.0.1:61505 myPCname:12080 ESTABLISHED
TCP 127.0.0.1:61570 myPCname:27015 ESTABLISHED
TCP 127.0.0.1:63866 myPCname:12080 ESTABLISHED
TCP 127.0.0.1:63963 myPCname:12080 ESTABLISHED
TCP 192.168.0.134:49626 8.19.144.91:http CLOSE_WAIT
TCP 192.168.0.134:50852 a65-32-34-89:http CLOSE_WAIT
TCP 192.168.0.134:51845 cs103:5050 ESTABLISHED
TCP 192.168.0.134:58200 bos-m003a-sdr2:5190 ESTABLISHED
TCP 192.168.0.134:58219 205.188.8.84:5190 ESTABLISHED
TCP 192.168.0.134:58220 oam-d12b:5190 ESTABLISHED
TCP 192.168.0.134:60083 media:http ESTABLISHED
TCP 192.168.0.134:63910 65.55.21.250:http TIME_WAIT
TCP 192.168.0.134:63928 a65-32-34-131:http TIME_WAIT
TCP 192.168.0.134:63964 channel16:http ESTABLISHED
TCP 192.168.0.134:63965 www:http CLOSE_WAIT
TCP 192.168.0.134:63966 110:http CLOSE_WAIT

any idea whats up with all the loopbacks?
July 12th, 2009, 08:55 PM
ByTeWrangler

Just a quick guess..

27015 .. thats for Steam if I am not wrong.. do you play games powered by Steam ?

EDIT :

1. Saw on Avast forum (google search) that port 12080 is used by the HTTP scanner of the firewall of avast (proxy).. Do you use avast ?

Everything post port number 48152 are dynamic and used by app's.

2. Damn.. I don't know why i didn't give this as a soluton.. Assuming you're running some windows box.. type netstat -ao in the command prompt. You will the process that has opened the port.. SIMPLE !
July 13th, 2009, 01:55 AM
pcguy

Thanks!

You are right on 2 counts, steam and avast. The others I can lookup using the information you provided. Mucho gracias!
July 13th, 2009, 07:39 AM
ByTeWrangler

No problem mate..
July 13th, 2009, 02:33 PM
Cider

Quote:

netstat -ao

Very nice! Never knew that parameter :)
July 13th, 2009, 02:58 PM
dinowuff

netstat -aon Even better
July 13th, 2009, 09:03 PM
nebulus200

Or one better, netstat -anob

You don't have to ask what has it open ;)
July 14th, 2009, 08:34 AM
ByTeWrangler

Better still, use

http://technet.microsoft.com/en-us/s.../bb897437.aspx

TCPView - Graphical UI ..

PS: Feels so good answering a BOFH ! :D