Ben,

I had to reinstall Netstat.  I had uninstalled those utilities when I
started using 98Lite.  I didn't know what most of them were for....
still don't :-)

I think I have a problem:

C:\>netstat

Active Connections

  Proto  Local Address          Foreign Address        State
  TCP    socket7:2344           216.35.217.182:17027   CLOSE_WAIT
  TCP    socket7:2345           216.35.217.182:17027   SYN_SENT

C:\>netstat

Active Connections

  Proto  Local Address          Foreign Address        State
  TCP    socket7:2378           216.35.217.182:17027   ESTABLISHED

C:\>

I got the above after I closed Netscape, and didn't have any other
Internet software going except the dial-up connection.  I know that
isn't my ISP's IP address.  The fact that this is using such a high port
address seems suspicious as well... to me anyways.  What do you think?

Chad Fernandez
Michigan, USA


Ben A L Jemmett wrote:
>
> Hi Chad,
>
> One thing to try would be to issue a NETSTAT command in a command prompt -
> it'll list all active sockets on your machine:
>
> : C:\WINDOWS\Profiles\Ben A L Jemmett\Desktop>netstat
> :
> : Active Connections
> :
> :   Proto  Local Address          Foreign Address        State
> :   TCP    dell:1031              wells.mail.uk.easynet.net:pop3  TIME_WAIT
> :   TCP    dell:1039              pop.vip.suc.yahoo.com:pop3  TIME_WAIT
> :   TCP    dell:1040              wells.mail.uk.easynet.net:pop3  TIME_WAIT
> :   TCP    dell:1071              deltaweb.fife.wa.us:telnet  ESTABLISHED
>
> (TIME_WAIT means the socket has been closed, but it's waiting for the other
> end to notice - I think the delay is around 30 seconds usually).
>
> You should be able to tell, from the port numbers (1031, pop3, telnet etc.),
> what services are being accessed.  The large numbers on the local socket
> (1000+) are opened by applications to communicate - lower numbers (<1024)
> are reserved for services on your machine like POP3, IMAP, NNTP, SMTP etc.
>
> Regards,
> Ben A L Jemmett.
> (http://web.ukonline.co.uk/ben.jemmett/, http://www.deltasoft.com/)
>
> To unsubscribe from SURVPC send a message to [EMAIL PROTECTED] with
> unsubscribe SURVPC in the body of the message.
> Also, trim this footer from any quoted replies.
> More info can be found at;
> http://www.softcon.com/archives/SURVPC.html

To unsubscribe from SURVPC send a message to [EMAIL PROTECTED] with 
unsubscribe SURVPC in the body of the message.
Also, trim this footer from any quoted replies.
More info can be found at;
http://www.softcon.com/archives/SURVPC.html

Reply via email to