Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: netstat help!

22 Apr 2011   #1
ndex477

Windows 7 Home Premium 64bit
 
 
netstat help!

Can someone please explain why when i do a netstat -a sometimes i get some hosts as ESTABLISHED on ports of which I have no idea what they are. Example: one was port 1866 using swrmi protocol.

I read on the net that if there's anything showing up as established other that the programs that i have open on my machine, that I've been hacked.

Please help. Thanks in advance.


My System SpecsSystem Spec
.

22 Apr 2011   #2
Clinkz

Windows 7 Professional x64 Backtrack 4 R2
 
 

If your worried about unknown connections you can do the following to see what process is using that port.

Go to command prompt
Enter netstat -ano

You will get a report of Active Connections
Report includes: Protocol, Local Address, Foreign Address, State, PID

Write down the PID (process identifier) associated with port 1866/tcp (Also note Local Address, Foreign Address, Protocol and State.)

Start the Windows Task Manager

Select the Processes tab

Search for the PID you wrote down previously, that is the process that is using port 1866.
My System SpecsSystem Spec
23 Apr 2011   #3
ndex477

Windows 7 Home Premium 64bit
 
 

Clinkz,

I tried all of that initially. The issue is that when i do the netstat -ano also, some processes show up that i cannot find a clear explaintion for.

Another example is that when doing another netstat i found port 3334 ESTABLISHED which is used for Direct TV webcasting. I use a Verizon mobile hotspot. Could it be that someone else is also using ports through my hotspot?
My System SpecsSystem Spec
.


23 Apr 2011   #4
Clinkz

Windows 7 Professional x64 Backtrack 4 R2
 
 

Quote   Quote: Originally Posted by ndex477 View Post
Could it be that someone else is also using ports through my hotspot?
A question you have to ask yourself is, how good is the security of your network? if you have a firewall in place like Comodo or ZoneAlarm Then in most cases you should be safe on your local computer.

Though i understand your intrigue about what outbound connection are active in you network, i too did something similar a while ago. I first increased the security of my network as a whole, then the hosts connecting to that network.

You could always have a look at a program like CurrPorts, it is used to monitor outbound connections.
My System SpecsSystem Spec
23 Apr 2011   #5
ndex477

Windows 7 Home Premium 64bit
 
 

O.K., thanks a lot i'll look into it.
My System SpecsSystem Spec
Reply

 netstat help!




Thread Tools





Similar help and support threads
Thread Forum
What are all these connections in Netstat?
I typed in netstat and got all these connections, thing is though I don't know why all those ports are open, especially the 50,000 and up.
Network & Sharing
/cmd netstat gives me more than 40 ip addresses at once.. REALLy BAD?
so the 1st thing i noticed was when i right clicked the main tool bar and started the task manager i have a process named csrss.exe which i found out is a trojan... i ran avg and it got rid of two trojans but it still shows up on the processes.. i cant do anything to it either including go to the...
System Security
Netstat-B
I tried to use this but----no results I did the following; Hit start Entered cmd.exe Right click Administrator Enter code netstat-b
Performance & Maintenance
Netstat -b
Hi. I used the command netstat -b in the command prompt and I got a bunch of text that I don't know what it is. (I closed down all internet connections first, such as steam, web browser, etc.) Could you guys help me find out what these things are? Here's what it looks like: Prot. ...
Network & Sharing
Libeay32. dll; ssleay32.dll; netstat
Can anybody tell me if these files are part of Windows7, or if not what they are part of? I have found them in C:\users\my name. If they are needed, is the presnt location the right one? Actually I am wondering if they were part of the migration from my old XP computer and so superfluous.
General Discussion
netstat
Good evening you all, Can somebody explain to me why netstat -a gives the right output but netstat -b gives me a warning that i need administrators rights ..mine OS is Win7..is it a bug?.... Iam a Win7 tester
Network & Sharing

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 00:25.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App