Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: netstat help!

22 Apr 2011   #1

Windows 7 Home Premium 64bit
 
 
netstat help!

Can someone please explain why when i do a netstat -a sometimes i get some hosts as ESTABLISHED on ports of which I have no idea what they are. Example: one was port 1866 using swrmi protocol.

I read on the net that if there's anything showing up as established other that the programs that i have open on my machine, that I've been hacked.

Please help. Thanks in advance.

My System SpecsSystem Spec
.

22 Apr 2011   #2

Windows 7 Professional x64 Backtrack 4 R2
 
 

If your worried about unknown connections you can do the following to see what process is using that port.

Go to command prompt
Enter netstat -ano

You will get a report of Active Connections
Report includes: Protocol, Local Address, Foreign Address, State, PID

Write down the PID (process identifier) associated with port 1866/tcp (Also note Local Address, Foreign Address, Protocol and State.)

Start the Windows Task Manager

Select the Processes tab

Search for the PID you wrote down previously, that is the process that is using port 1866.
My System SpecsSystem Spec
23 Apr 2011   #3

Windows 7 Home Premium 64bit
 
 

Clinkz,

I tried all of that initially. The issue is that when i do the netstat -ano also, some processes show up that i cannot find a clear explaintion for.

Another example is that when doing another netstat i found port 3334 ESTABLISHED which is used for Direct TV webcasting. I use a Verizon mobile hotspot. Could it be that someone else is also using ports through my hotspot?
My System SpecsSystem Spec
.


23 Apr 2011   #4

Windows 7 Professional x64 Backtrack 4 R2
 
 

Quote   Quote: Originally Posted by ndex477 View Post
Could it be that someone else is also using ports through my hotspot?
A question you have to ask yourself is, how good is the security of your network? if you have a firewall in place like Comodo or ZoneAlarm Then in most cases you should be safe on your local computer.

Though i understand your intrigue about what outbound connection are active in you network, i too did something similar a while ago. I first increased the security of my network as a whole, then the hosts connecting to that network.

You could always have a look at a program like CurrPorts, it is used to monitor outbound connections.
My System SpecsSystem Spec
23 Apr 2011   #5

Windows 7 Home Premium 64bit
 
 

O.K., thanks a lot i'll look into it.
My System SpecsSystem Spec
Reply

 netstat help!




Thread Tools



Similar help and support threads for2: netstat help!
Thread Forum
What are all these connections in Netstat? Network & Sharing
/cmd netstat gives me more than 40 ip addresses at once.. REALLy BAD? System Security
Solved Netstat-B Performance & Maintenance
Netstat -b Network & Sharing
Solved Unidentified Process Identifiers using netstat General Discussion
Libeay32. dll; ssleay32.dll; netstat General Discussion
netstat Network & Sharing

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 01:47 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33