Active connections

I see a lot of active connections to my home network. How can I find valid connections?

I have avast! antivirus, firewall, password & protected key RSV4000; netstat output b is the following (sometimes I see a lot more connections, say 30, in the TIME_WAIT state). Is this normal or something to worry about? Thank you.

C:\Windows\System32>Netstat b

Active connections

State of proto local address foreign address
TCP 127.0.0.1:12080 CHOCOLATE: 1896 TIME_WAIT
TCP 127.0.0.1:12080 CHOCOLATE: 1897 TIME_WAIT
TCP 127.0.0.1:12080 CHOCOLATE: 1924 TIME_WAIT
TCP 127.0.0.1:12080 CHOCOLATE: 1928 TIME_WAIT
TCP 127.0.0.1:12080 CHOCOLATE: 1939 TIME_WAIT
TCP 127.0.0.1:12080 CHOCOLATE: 1941 TIME_WAIT
TCP 192.168.1.108:1234 host27:http CLOSE_WAIT
[jusched.exe]
TCP 192.168.1.108:1235 BLUEBIRD: 1138 ESTABLISHED
[WHSConnector.exe]
TCP 192.168.1.108:1885 a96-17-150 - 24:http TIME_WAIT
TCP 192.168.1.108:1890 iw - in - f148:http TIME_WAIT
TCP 192.168.1.108:1891 iw - in - f148:http TIME_WAIT
TCP 192.168.1.108:1895 iw - in - f155:http TIME_WAIT
TCP 192.168.1.108:1901 iy - in - f149:http TIME_WAIT
TCP 192.168.1.108:1905 63-216-54 - 161:http TIME_WAIT
TCP 192.168.1.108:1931 64.236.101.16:http TIME_WAIT
TCP 192.168.1.108:1935 a69-192-133 - 115:http TIME_WAIT
TCP 192.168.1.108:1947 host73:http TIME_WAIT
TCP 192.168.1.108:1948 host73:http TIME_WAIT
TCP 192.168.1.108:1949 host73:http TIME_WAIT
TCP 192.168.1.108:1950 host73:http TIME_WAIT
TCP 192.168.1.108:1951 host73:http TIME_WAIT
TCP 192.168.1.108:1952 host73:http TIME_WAIT

O.K. We'll see. Open TCP ports (i.e. programs accept incoming connections):

TCP 0.0.0.0:135 0.0.0.0:0 LISTENING 820
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING 4
TCP 0.0.0.0:1025 0.0.0.0:0 LISTENING 492
TCP 0.0.0.0:1026 0.0.0.0:0 LISTENING 944
TCP 0.0.0.0:1027 0.0.0.0:0 LISTENING 360
TCP 0.0.0.0:1028 0.0.0.0:0 LISTENING 572
TCP 0.0.0.0:1030 0.0.0.0:0 LISTENING 1696
TCP 0.0.0.0:1034 0.0.0.0:0 LISTENING 548
TCP 0.0.0.0:5357 0.0.0.0:0 LISTENING 4
TCP 0.0.0.0:9000 0.0.0.0:0 LISTENING 4
TCP 0.0.0.0:16107 0.0.0.0:0 LISTENING 1492
TCP 127.0.0.1:1024 0.0.0.0:0 LISTENING 2340

Port 135: for Windows file sharing (RPCSS)
Port 445: for Windows sharing files (using PID 4)
Port 1025: use by wininit.exe. Don't know about that one.
Port 1026: I guess that's for the homegroup
Port 1027: seems to be another network service, perhaps something UPnP associated.
Port 1028: Windows Security Service.
Port 1030: Printer Spooler
Port 1034: services.exe. This could be anything including a virus.
Port 5357: Web Services on devices via system process.
Port 9000: cslistener through system. Could be something lse.
Port 16107: avast antivirus.

Port 1024: is only accessible to the computer itself. SlingAgent. You should know that...

You definitely have a lot of stuff running on your computer...

You have a lot of these lines:

127.0.0.1:12080 127.0.0.1:2215 2760 ESTABLISHED TCP
TCP 127.0.0.1:12025 0.0.0.0:0 LISTENING 3824
TCP 127.0.0.1:12080 0.0.0.0:0 LISTENING 3632

connection to 12025 or 12080 on the computer itself. 12080 is the avast web scanner (i.e. a web proxy through which everything is redirected). 12025, 12110, 12119, 12143 is analysis of emails (i.e. all mails go through this port).

Here is access to the internet web server to your browser through the web Analyzer:

TCP 192.168.1.108:1293 63.216.54.152:80 CLOSE_WAIT 4384
TCP 192.168.1.108:2073 209.85.225.147:80 CLOSE_WAIT 4308
192.168.1.100:1138 192.168.1.108:2159 2480 ESTABLISHED TCP

This is iexplorer HTTPS access directly. HTTPS cannot go through the proxy.

74.125.95.106:443 192.168.1.108:2219 2760 ESTABLISHED TCP

I think it's all TCP ports...

Tags: Linksys Routers

Similar Questions

  • How to erase history without deleting the active connections?

    I never used to have this problem and I have updated Firefox repeatedly but continue to have the problem. Whenever I have clear history (everything EXCEPT the active connections), get it out of my active connections. I clear the cache and cookies quite often because of my older laptop computer and constant streaming on Netflix, Hulu and TWC. Is there a way I can fix this problem?

    A detail as a website to remember you (automatically log you) is stored in a cookie.

    You can use these steps to make a Web site recognize and remember you:

    • Create a cookie 'allow' except to keep these cookies, in particular in the case of secure websites and when the cookies expire when Firefox is closed.
    • Tools > Options > privacy > "Use the custom settings for history" > Cookies: Exceptions

    Make sure that you are not Firefox running in permanent private browsing mode (do not remember the story; Always use the private browsing mode).

    If the deletion of cookies did not help, then it is possible that the cookies.sqlite file that stores the cookies has been corrupted.

    • Rename (or delete) cookies.sqlite (cookies.sqlite.old) and if present remove cookies.sqlite - shm and cookies.sqlite - wal in the Firefox profile folder in the cookies.sqlite case has been corrupted.

    You can use this button to go to the current Firefox profile folder:

  • 22 FF doesn't remember history/active connections after reboot/logg off the PC

    Hi, I have this problem that started lately. Rarely, I restart my PC, as it always is in any case. Now, every time I restart my PC or Log off, and then log in again, FF forget the active connections and history and I connect on all my sites again. The problem is only concerts on FF and not any other browser since I have an another three (ie, google chrome and netscape) + FF, but I use FF mostly and rarely others.

    I checked all the software that I installed and no product cleaning here as ccleaner and anti-virus settings are checked. I also completely uninstalled FF and installed the latest version and tried to connect to one of the websites before you install any addon.

    seems OK, it was a bit of the virus or malware that keep the pc on its State (unable to display hidden folders and files, the gel firefox so not history or the active connection saved) I changed my antivirus and used combofix/ccleaner for all retrieve and ready again.

  • What are the "active connections" in the cache

    What is?

    Quote:

    Active connections are sites you are currently connected to that you are asked to remember that you are connected (e.g. Facebook, if you open a session and her application of do not forget that you are connected). Erased just logs you on these sites.

    This is not true.
    These settings are stored in a cookie on your computer and are not affected by disabling the active connections.

    "Active connections" covers what philipp displayed above (using Basic authentication) and those are connections to FTP servers via a login to authenticate local or registration on servers otherwise.

  • FSWM shows the active connections on the FWSM standby why?

    Does anyone know why the FWSM Eve shows 45581 active connections.

    Thank you very much

    Ian Vickery

    Standby

    XTRAK1-County of conn sho FWSM #.

    45581 in use

    Primary

    XTRAK1-County of conn sho FWSM #.

    158080 in use

    Unit of primary failover

    Ha failover LAN interface

    Frequency of survey 10 seconds

    failover replication http

    This host: primary: enabled

    Activity time: 118040 (s)

    Interface (outside): Normal

    State-sync () of the interface: Normal

    MGMT () of the interface: Normal

    Crippen () of the interface: Normal

    Interface of Gorgon: Normal

    Production interface (): Normal

    Another host: high - availability

    Activity time: 1311050 (s)

    Interface (outside): Normal

    State-sync () of the interface: Normal

    MGMT () of the interface: Normal

    Crippen () of the interface: Normal

    Interface of Gorgon: Normal

    Production interface (): Normal

    Failover stateful logical Update Statistics

    Link: State-sync

    Stateful Obj xmit rcv rerr xerr

    15850 0 15849 General 0

    sys cmd 15850 0 15849 0

    time 0 0 0 0

    xlate 0 0 0 0

    Conn TCP 289351 0 331 0

    Conn UDP 0 0 0 0

    TCP 58955994 0 24657 3148 NPs

    182101602 0 58540 3148 NPs UDP

    Logical update queue information

    Heart Max Total

    Q: recv 0 1 15849

    Xmit Q: 0 1 15850

    XTRAK1-FWSM #.

    XTRAK1-FWSM #.

    XTRAK1-County of conn sho FWSM #.

    45581 in use

    XTRAK1-sho FWSM # fail

    Failover on

    Secondary failover unit

    Ha failover LAN interface

    Frequency of survey 10 seconds

    failover replication http

    This host: high - availability

    Activity time: 1311050 (s)

    Production interface (): Normal

    Interface of Gorgon: Normal

    Crippen () of the interface: Normal

    MGMT () of the interface: Normal

    State-sync () of the interface: Normal

    Interface (outside): Normal

    Another host: primary: enabled

    Activity time: 117960 (s)

    Production interface (): Normal

    Interface of Gorgon: Normal

    Crippen () of the interface: Normal

    MGMT () of the interface: Normal

    State-sync () of the interface: Normal

    Interface (outside): Normal

    Failover stateful logical Update Statistics

    Link: State-sync

    Because you are a dynamic rollover. Connections built on assets are transferred to waiting on the "failover connection", this way if the active FW dies suddenly, forward resumes and knows all of the existing connections and sessions users abandon.

    Not all types of connection are transferred, that is why you see the difference in number, but other than that you see is normal and a good thing. If you see not those connections on the day before, when the failover occurred would abandon all user sessions and they would have to reconnect.

    One thing I might suggest, you have replication HTTP is enabled with the command "failover replication http. On a busy FW, this can lead to a large number of connections being replicated. When you consider that loading a web page can open and close different connections of 5-10, all very quickly, you really want to have all these replicated to the waiting? If the active made fail the worst that could happen is that the user would have to reload their web page. I would say that put off, which is the default anyway, it'll put a lot less load on your two FW.

  • Active connection decreases do not when the application is closed

    Hello.

    High number of connections active and the current number of active connection in the pool of connections to data source in weblogic 10.3 decreases do not even when I connect from my ADF (disconnect) application. I put the maximum number of connections = 15. When the current number of active connection becomes 15 app gives exception "no resources found in connection pool please increase the size of the connection pool.

    can any body tell me what is this and the solution of the other before increasing the size of the connection pool?

    -Usman

    Hello

    Make sure also that the idle connection timeout is set to lower the value.

    Thank you

    Sharmela

  • No connection listed under active connections

    We use Smart View 11.1.2.1.00 (Build 271) with MS Excel 2007. When you perform Ad Hoc analysis on an Essbase cube, we connect on the Ribbon of Smart View and will open. This opens a Smart View Panel to the right. We then click shared connections. < cube Essbase > and click on "Ad hoc analysis" (enter the password) to connect. However, the active connection does not appear under Open | Active connections (Smart View Ribbon) - this area is totally blank.

    The 'Recently used' option lists previous connections very well, so why not "active connections" appears not something useful? Is this a bug? How is it possible to see the details of the current active connection?

    In order to see the connection under connections, you must right-click on the database and click on add to private connections.

    See you soon,.
    Mehmet

  • Active connections to a virtual machine

    Hello

    I hope just a quick; How to find who is connected to the virtual computer, I'm looking at? VMWare Infrastructure Client tells me "There are three active connections to this console" (just a Windows 2003 Server), but I don't know who they are, and there are two that shouldn't be connected...

    Are there people who have used the RDP to machines? (I'm still the only user listed anyway so I know it isn't)

    Not a direct method to get what you need.  But, if you have the calendar, and the Userid, you can get the address of the PC the vCenter security event log source.

    -KjB

  • Several Console Active connections

    Sometimes when I open a console to a virtual computer, I'll have this yellow alert bar that says there are now 2 (or more) of the active connections to the same console.

    Is there a way to tell which consoles open to virtual machines?

    -Tim

    You could take a look at the events in the 'Tasks and events' tab of the virtual machine to see who opened a console connection on the virtual computer.

    -C

  • List of active connections

    Hello. Is someone can please tell me how I would list active connections throughout my site? (cflogin). I must be able to enumerate each user who is currently logged on to the site (and the last page, they asked, if that's possible).

    Note: The Session management is NOT enabled.

    Thanks a bunch!

    Store this information in a database.  Then you can question him.

  • Disconnect all active connections of Essbase using VBA in Excel code

    Hi all

    I am currently using the code to disconnect the connection active essbase below. It works fine but it shows me a window with the list of connections active essbase and I have to select each essbase connection, and click Disconnect. I want a vba code that will disconnect / kill all the active connections of Essbase to only once. for example I have 10 worksheets relating to different databases within Essbase. I want a code that will cut all 10 sheets at once. Please expedite. Thank you for your help in advance.

    Private Sub MDisConn()
    On Error Resume Next
    EssError = EssMenuVDisconnect()
    ErrorBox
    End Sub

    Hello

    You could use EssVDisconnect that takes a sheet name and does not open the login logout box.

    DECLARE Function EssVDisconnect Lib "ESSEXCLN. XLL"(ByVal Nom_feuille As Variant) As Long

    Void DisConn()
    X = EssVDisconnect ("Sheet1")
    End Sub

    See you soon

    John
    http://John-Goodwin.blogspot.com/

  • How can I read the active (connected) Renault and send then to the entry on DAQ device name help?

    I have a property system for daqmx node but it won't let me change it to read when I right click on it. I try to have my program detect the name of data acquisition which is plugged into the PC and then send to the daq assistant so that it runs properly wiithout having me manually change the name of the device every time I change hardware.

    labview12110 wrote:
    Im just frustrated that the only function I have is to get a list of the things that I can't do anything with. MAX knows who is active can I call in some way?

    You do the programming.  What is LabVIEW.  MAX gives you all the tools to do what you want and much more just to do what you want to program.

    Joined a VI that does what you want.  I look at all your devices and returns the first not simulated.  Apparently this list already excludes devices not connected to the system.

  • Number of active connections to given time

    I have this data:
    WITH t AS
      (SELECT to_date('01/31/2013 08:31:00','MM/DD/YYYY HH24:MI:SS') logon_time,
        to_date('01/31/2013 08:39:00','MM/DD/YYYY HH24:MI:SS') logoff_time
      FROM dual
      UNION ALL
      SELECT to_date('01/31/2013 08:31:00','MM/DD/YYYY HH24:MI:SS') logon_time,
        to_date('01/31/2013 08:33:00','MM/DD/YYYY HH24:MI:SS') logoff_time
      FROM dual
      UNION ALL
      SELECT to_date('01/31/2013 08:32:00','MM/DD/YYYY HH24:MI:SS') logon_time,
        to_date('01/31/2013 08:32:00','MM/DD/YYYY HH24:MI:SS') logoff_time
      FROM dual
      UNION ALL
      SELECT to_date('01/31/2013 08:32:00','MM/DD/YYYY HH24:MI:SS') logon_time,
        to_date('01/31/2013 08:34:00','MM/DD/YYYY HH24:MI:SS') logoff_time
      FROM dual
      UNION ALL
      SELECT to_date('01/31/2013 08:39:00','MM/DD/YYYY HH24:MI:SS') logon_time,
        to_date('01/31/2013 08:41:00','MM/DD/YYYY HH24:MI:SS') logoff_time
      FROM dual
      ) ,
      u AS
      ( SELECT to_date('01/31/2013 08:31:00','MM/DD/YYYY HH24:MI:SS') ztime FROM dual
      UNION ALL
      SELECT to_date('01/31/2013 08:32:00','MM/DD/YYYY HH24:MI:SS') ztime FROM dual
      UNION ALL
      SELECT to_date('01/31/2013 08:33:00','MM/DD/YYYY HH24:MI:SS') ztime FROM dual
      UNION ALL
      SELECT to_date('01/31/2013 08:34:00','MM/DD/YYYY HH24:MI:SS') ztime FROM dual
      UNION ALL
      SELECT to_date('01/31/2013 08:35:00','MM/DD/YYYY HH24:MI:SS') ztime FROM dual
      UNION ALL
      SELECT to_date('01/31/2013 08:36:00','MM/DD/YYYY HH24:MI:SS') ztime FROM dual
      UNION ALL
      SELECT to_date('01/31/2013 08:37:00','MM/DD/YYYY HH24:MI:SS') ztime FROM dual
      UNION ALL
      SELECT to_date('01/31/2013 08:38:00','MM/DD/YYYY HH24:MI:SS') ztime FROM dual
      UNION ALL
      SELECT to_date('01/31/2013 08:39:00','MM/DD/YYYY HH24:MI:SS') ztime FROM dual
      )
      SELECT * FROM t RIGHT JOIN u ON t.logon_time = u.ztime ORDER BY ztime;
    And I would like to know how many connections are active for any given ztime. Pseudo-device code I thought was:
    ztime, count where logon_time = ztime or ( logon_time < ztime and logoff_time >= ztime )
    The results of the above might look like:
    zTime               Logon_Count
    01/31/2013 08:31:00 2
    01/31/2013 08:32:00 4
    01/31/2013 08:33:00 3
    01/31/2013 08:34:00 2
    01/31/2013 08:35:00 1
    01/31/2013 08:36:00 1
    01/31/2013 08:37:00 1
    01/31/2013 08:38:00 1
    01/31/2013 08:39:00 2

    Try this...

    WITH t AS
         (SELECT TO_DATE ('01/31/2013 08:31:00','MM/DD/YYYY HH24:MI:SS') logon_time,
                 TO_DATE ('01/31/2013 08:39:00', 'MM/DD/YYYY HH24:MI:SS') logoff_time
            FROM DUAL
          UNION ALL
          SELECT TO_DATE ('01/31/2013 08:31:00','MM/DD/YYYY HH24:MI:SS') logon_time,
                 TO_DATE ('01/31/2013 08:33:00','MM/DD/YYYY HH24:MI:SS') logoff_time
            FROM DUAL
          UNION ALL
          SELECT TO_DATE ('01/31/2013 08:32:00','MM/DD/YYYY HH24:MI:SS' ) logon_time,
                 TO_DATE ('01/31/2013 08:32:00','MM/DD/YYYY HH24:MI:SS') logoff_time
            FROM DUAL
          UNION ALL
          SELECT TO_DATE ('01/31/2013 08:32:00','MM/DD/YYYY HH24:MI:SS') logon_time,
                 TO_DATE ('01/31/2013 08:34:00','MM/DD/YYYY HH24:MI:SS') logoff_time
            FROM DUAL
          UNION ALL
          SELECT TO_DATE ('01/31/2013 08:39:00','MM/DD/YYYY HH24:MI:SS') logon_time,
                 TO_DATE ('01/31/2013 08:41:00','MM/DD/YYYY HH24:MI:SS') logoff_time
            FROM DUAL),
         u AS
         (SELECT TO_DATE ('01/31/2013 08:31:00', 'MM/DD/YYYY HH24:MI:SS') ztime
            FROM DUAL
          UNION ALL
          SELECT TO_DATE ('01/31/2013 08:32:00', 'MM/DD/YYYY HH24:MI:SS') ztime
            FROM DUAL
          UNION ALL
          SELECT TO_DATE ('01/31/2013 08:33:00', 'MM/DD/YYYY HH24:MI:SS') ztime
            FROM DUAL
          UNION ALL
          SELECT TO_DATE ('01/31/2013 08:34:00', 'MM/DD/YYYY HH24:MI:SS') ztime
            FROM DUAL
          UNION ALL
          SELECT TO_DATE ('01/31/2013 08:35:00', 'MM/DD/YYYY HH24:MI:SS') ztime
            FROM DUAL
          UNION ALL
          SELECT TO_DATE ('01/31/2013 08:36:00', 'MM/DD/YYYY HH24:MI:SS') ztime
            FROM DUAL
          UNION ALL
          SELECT TO_DATE ('01/31/2013 08:37:00', 'MM/DD/YYYY HH24:MI:SS') ztime
            FROM DUAL
          UNION ALL
          SELECT TO_DATE ('01/31/2013 08:38:00', 'MM/DD/YYYY HH24:MI:SS') ztime
            FROM DUAL
          UNION ALL
          SELECT TO_DATE ('01/31/2013 08:39:00', 'MM/DD/YYYY HH24:MI:SS') ztime
            FROM DUAL)
    SELECT   u.ztime, COUNT (*) logon_count
        FROM t, u
       WHERE u.ztime BETWEEN logon_time AND logoff_time
    GROUP BY u.ztime
    ORDER BY u.ztime
    
  • From about 2 days ago, I can use is no longer Yahoo Mail Chat. I tried to disable the plug-ins and Add-ons and clearing cookies, cache and active connections. I enter in IE and have access to the chat but I use FF as my browser

    I use Windows 7

    This is a regression in FF9, see https://bugzilla.mozilla.org/show_bug.cgi?id=713014 try FF 10 in beta which is unaffected or follow the workaround solution published in the bug report.

  • upgrade to firefox after 8 no matter what url I enter in the address bar will not work.like there is no active connection, or an address to go to.dead bar.also I find my recorded history links will not work.

    Windows xp pro. This means that my files are corrupt? so even if I wanted to return the old version of firefox my story will be bad?

    One possible cause is a problem with the places.sqlite file that stores the bookmarks and history.

    Start Firefox in Firefox to solve the issues in Safe Mode to check if one of the extensions or if hardware acceleration is the cause of the problem (switch to the DEFAULT theme: Firefox (Tools) > Add-ons > appearance/themes).

Maybe you are looking for

  • datafinder toolkit LabVIEW 2013

    I have a small simple VI who does not return the results I want. My VI DIAdem will search for a specific name of the record.  So, I want to recover the date the time called modifyTime at the file level.  However, my simple VI Gets an 305502 error. I

  • My PC startup error message: c:\Users\Administrator\AppDate\Local\TBHostSupport\TBHostsupport_0.dll

    How can I fix the error message I get when I start my PC 'error loading '. c:\Users\Administrator\AppDate\Local\TBHostSupport\TBHostsupport_0.dll The specific module could not be found.

  • Quit smoking black print

    My Officejet 7000 Wide Format has stopped printing black. I replaced the cartridge, cleaned the heads, aligned the cartridges but nothing. Nothing prints in black, but all my controls HP tell me that everything is fine. Help, please. I really love th

  • How to fix the family name is spelled on computer

    I use Windows 7, when I get an email my name is spelled wrong, how do I fix?

  • update to hold outside the custom control

    Hello I do a custom control similar to the slider. When I tap on the native cursor and go out with the finger, the cursor still have the focus and therefore the handle to continue to move. I'd like to get this behavior with my custom control, but whe