-
February 22nd, 2004, 01:45 PM
#1
Senior Member
Suspecious Connections
in my netstat command i found two connectins with both local and foreign address as localhost, can any body tell me what these connections are.
-
February 22nd, 2004, 02:18 PM
#2
Have you tried a netstat -a -o -n to get a little more information?? This will give you the PID which may help you determine what is causing these connections.
-
February 22nd, 2004, 03:00 PM
#3
I just did a quick little netstat and i got the same thing but with different numbers for example..
i got
TCP Sarah:1025 0.0.0.0:0
TCP Sarah:137 0.0.0.0:0
TCP Sarah:138 0.0.0.0:0
TCP Sarah:nbsession 0.0.0.0:0
UDP Sarah:1025 *:*
UDP Sarah:nbname *:*
UDP Sarah:nbdatagram *:*
so if i'm not mistaken then there's nothing there that you shouldn't be paranoid about.
cheers
..::front2back::..
-
February 22nd, 2004, 03:03 PM
#4
IIRC, Ports 1025 and 1026 are both used by Task Scheduler (RPC). This Article may help you in locking down your Windows services and keeping them to a minimum.
-
February 22nd, 2004, 03:09 PM
#5
Thanks for that Link MsMittens very useful indeed, gonna be up all night reading now.
So you got anymore useful Links like that or should i just go ask my best friend google?
cheers
..::front2back::..
-
February 22nd, 2004, 03:15 PM
#6
Google is the ultimate friend. If you look around AO there are a few tutorials/links on Locking Down Windows. Do a search for NSA+windows. Not too surprising, NSA has some guides on how to lock down Windows.
-
February 22nd, 2004, 03:20 PM
#7
Originally posted here by MsMittens
Google is the ultimate friend. If you look around AO there are a few tutorials/links on Locking Down Windows. Do a search for NSA+windows. Not too surprising, NSA has some guides on how to lock down Windows.
Ok thanks MsMittens, i will defiantly do a google search, and search through the Tutorials area of this place.
thanks
..::front2back::..
-
February 22nd, 2004, 09:59 PM
#8
Junior Member
Are you using Mozilla? 'cause mozilla has two loop connections to localhost that are consecutive ports.
-
February 23rd, 2004, 01:06 PM
#9
Senior Member
thanks all and i was not being paranoid i just wanted to know why there are two connections to my computer thats all . thanks for the links MsM it would be a long read so i would be a bit busy
BTW : no i dont use Mozilla. ...
Ok thanks MsMittens, i will defiantly do a google search, and search through the Tutorials area of this place
so am i .....
[edit]
i just found out my G.F. has downloded Motzilla FireFox . i didn't notice that it was running at that time . those two connectins are only present when it is running. sorry about that may be i should stop drinking this much 
'cause mozilla has two loop connections to localhost that are consecutive ports.
yep newinnash was dead right
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|