Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Netstat -b

16 Jun 2011   #1

Windows 7 Professional x64
 
 
Netstat -b

Hi.

I used the command netstat -b in the command prompt and I got a bunch of text that I don't know what it is. (I closed down all internet connections first, such as steam, web browser, etc.)
Could you guys help me find out what these things are?

Here's what it looks like:



Prot. Lokal adress Extern adress Status
[System]
TCP 192.168.***** 213-155-158-73:http TIME_WAIT
TCP 192.168.***** 213-155-158-73:http FIN_WAIT_2
[System]
TCP 192.168.***** 213-155-158-73:http TIME_WAIT
TCP 192.168.***** www-12-02-ash3:http TIME_WAIT
TCP 192.168.***** channel-150-155:http TIME_WAIT
TCP 192.168.***** 195-12-231-50:http FIN_WAIT_2
[System]
TCP 192.168.***** 195-12-231-50:http FIN_WAIT_2
[System]
TCP 192.168.1.***** 195-12-231-50:http FIN_WAIT_2
[System]
TCP 192.168.1.***** 195-12-231-50:http FIN_WAIT_2
[System]
TCP 192.168.1.***** 195-12-231-50:http FIN_WAIT_2
[System]
TCP 192.168.1.***** 195-12-231-50:http FIN_WAIT_2
[System]
TCP 192.168.1.***** 199.7.79.171:http FIN_WAIT_2
[System]
TCP 192.168.1.***** 213-155-158-73:http TIME_WAIT
TCP 192.168.1.***** www-12-02-ash3:http TIME_WAIT
TCP 192.168.1.***** www-12-02-ash3:http TIME_WAIT
TCP 192.168.1.***** 199.7.79.171:http FIN_WAIT_2
[System]
TCP 192.168.1.***** ip-69:http TIME_WAIT
TCP 192.168.1.***** 193-45-3-138:http TIME_WAIT


(I blanked out the local ip, just in case.)

My System SpecsSystem Spec
.

16 Jun 2011   #2

Windows 7 x64 Ultimate
 
 

Those are a bunch of sockets that were going to web sites that are now cut off (probably ungracefully) and waiting to close after the sockets time out.

If you do a netstat after a few minutes they should all be gone.

Can't tell what program was originally opening them though... legitimate programs and nefarious programs alike can leave hung sockets quite often. When they are all gone, open your programs one at a time andyou can see what matches up if you want.

The TIME_WAITs and FIN_WAITS are nothing to be worried about in themselves unless you had like thousands of them.

[Edit] Or did you want to know specifically if anyone know what "System" process was opening them?[/edit]
My System SpecsSystem Spec
16 Jun 2011   #3

Windows 7 Professional x64
 
 

Thanks.

I shut everything down, waited for about 20 mins and tried again.
Now I got a few stuff (for example one saying steampowered - even though steam was offline.) They all said ESTABLISHED in the "status".
One said: cdce:http as "external ip" -What's this?
My System SpecsSystem Spec
.


17 Jun 2011   #4

Windows 7 x64 Ultimate
 
 

netstat abbreviates names when it can to maintain formatting. For example is you were connected to www.sevenforums.com it would just say "sevenforums:http". The name can also be a local MS network name as well. I.e. the name of another computer on your local network.

If you want to know what the IP address is, do a netstat -bn. Then you'll get the IP addresses instead and you can do a reverse lookup on the IP address and get the full name using:
nslookup <ipaddress>

Though sometimes your default DNS server wont do reverse lookups, if it can't find the name and the address you got is not on your local network do a:
nslookup <ipaddress> 8.8.8.8

That will use Google's DNS to do the name lookup for you.
My System SpecsSystem Spec
Reply

 Netstat -b




Thread Tools



Similar help and support threads for2: Netstat -b
Thread Forum
What are all these connections in Netstat? Network & Sharing
/cmd netstat gives me more than 40 ip addresses at once.. REALLy BAD? System Security
Solved Netstat-B Performance & Maintenance
netstat help! Network & Sharing
Solved Unidentified Process Identifiers using netstat General Discussion
Libeay32. dll; ssleay32.dll; netstat General Discussion
netstat Network & Sharing

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 09:04 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33