Re: paging the network/TCP-isti

On 29 Mar, 09:48, "Chris H" <fazer1000.thous...@xxxxxxxxxxxx> wrote:
Catman wrote:
Chris H wrote:

I give up. I'll buy a new PC. It'll cause me less pain in the long
run.

I'll give you a fiver for the old one.

It's worth at least a tenner.

Simple answer, no one is currently sure. More data would be useful.

I can only suggest that you connected to SteveH's machine at some
point in the past to get a torrent or download some perfectly legal
music, and the application you used is still trying to connect on
start up.

The only things I can think of that are related to UKRM were the UKRM
GMail drive which was uninstalled ages ago. In fact it was never
installed on this laptop, although I transfered settings from my old
one.

If you could run lsof, we could see what process is listening to
SteveH's front room.....

I wiki'd for an explanation and it appears that the nearest equivalent
is netstat -b -v

The funny thing is that it should show the processes that are listening
as well as open, but it only shows the ones that are open (due to
Kservice which is the file sharing thing that comes with BBC iPlayer).
Nothing suspicious shows up.

I've checked for malware, spyware and rootkits. The system is up to
date, as is the AV and Firewall. Checking for open ports using grc.com
showed these TCP connections to be 'stealthed'.  I presume the latter is
good news because nobody external to my network can connect to those
ports.

I could always ask SteveH to re-connect the server and then I'd find
out....or I could just stop worrying like 90% of windows users.

BTW. The first person who suggests installing Linux or buying a fucking
Apple Mac is a ***.

I'll *** off back into the undergrowth now.

If you do "netstat -na" it will display addresses
and not names. This may clarify the issue.

My PC right now has stuff like:-

TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:912 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49152 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49153 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49154 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49155 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49156 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49157 0.0.0.0:0 LISTENING
TCP 192.168.2.194:139 0.0.0.0:0 LISTENING

Without the "n" it says that the right side 0.0.0.0 is itself????

Listening anyway means that there is NO connection.
It is listening ready to be connected to.
"Established" is the one to worry about.

Looks like the designer of netstat wanted to put something
in the column even if there was nothing to
put there so they put nothing in - in the form of
0.0.0.0:0 and for some reason the name lookup process
turns that into the name observed.
Check your hosts file - usually -
c:\windows\system32\drivers\etc\hosts


.