[pat mcgroin]

My network skills arent so good, and I cant remember how to get the info that I need.

My main concern is I would like to see what my stand alone internet connection is communicating with and here is why.

Recently my connection seems to be showing a lot of activity when it should be idle.
Running no browser or anything odd I see increased activity.
I realize that the connection will ping back and forth from time to time to keep the connection active and it is expected (every 10 - 15 secs.).
That seems to have changed to essentially non stop.

I need to reset my (Cable) modem when I log on due to a unrecognized network message.

I dont have anything set to auto check except Avast and Java.
MS update are off completely.

PLEASE dont banish me until you READ this.
I know the word is Taboo here.
I think that I know it may have something to do with World of Warcraft, because even thoughit is LEGIT and LEGAL, they use P2P to update.
The reason that I mention this is my son recently Xfered his account from the XP side of this computer to the Vista side.
This is when the trouble seemed to start.

My question so far is what is the DOS command to see what connections are open so that I can isolate the potential issue.

Things that I do know.
MS updates = off
Vista firewall = on
Avast (all protections) = on and tested
Spybot (I know) = on and tested
Task manager = looked into
startup progs = normal and few
hosts file checked

I may have missed something in the list and if so please let me know.

Currently Im going to get Process Explorer to try and determine what is running.

I know that there are DOS commands to see my connections that will help with process IDs and such.
Please help me to remember

 

[johnwill]

Re: I need some help to remember

Please supply the following info, exact make and models of the equipment please.

Name of your ISP (Internet Service Provider).
Make and exact model of the broadband modem.
Make and exact model and hardware version of the router (if a separate unit).
Make and exact model and hardware version of any other network equipment, like a repeater, a booster, hi-gain antenna, etc.
Model numbers can usually be obtained from the label on the device.
Connection type, wired or wireless.
If wireless, encryption used, (none, WEP, WPA, or WPA2)
Version and patch level of Windows on all affected machines, i.e. XP (Home or Pro), SP1-SP2-SP3, Vista (Home, Business, Ultimate), etc.
The Internet Browser in use, IE, Firefox, Opera, etc.




Please give an exact description of your problem symptoms, including the exact text of any error messages.

• Have you tried to do a system restore to before the problem occurred?
• If you're using a wireless connection, have you tried a direct connection with a cable to see if that changes the symptoms?
• For wireless issues, have you disabled all encryption on the router to see if you can connect that way?
• For wireless laptops, have you made SURE the wireless switch is on?
• For wired connection issues, have you booted in Safe Mode with Networking to see if that changes the symptoms?
• Have you connected directly to the broadband modem to see if this is a router or modem/ISP issue?
• If there are other computers on the same network, are they experiencing the same issue, or do they function normally?

On any affected computer, I'd also like to see this:

Hold the Windows key and press R, then type CMD (COMMAND for W98/WME) to open a command prompt:

Type the following commands on separate lines, following each one with the Enter key:

PING 74.125.45.100

PING yahoo.com

NBTSTAT -n

IPCONFIG /ALL

Right click in the command window and choose Select All, then hit Enter.
Paste the results in a message here.

If you are on a machine with no network connection, use a floppy, USB disk, or a CD-RW disk to transfer a text file with the information to allow pasting it here.

 

[2xg]

Re: I need some help to remember

Hello,

You'll probably have too many ports that are open. You may go ahead and supply the info. that johnwill asked, also you may try the NETSTAT command to find out what type of ports are being used. Pls. don't miss out the link at the end, it's a tool to find open ports.
http://www.petri.co.il/quickly_find_local_open_ports.htm

 

[pat mcgroin]

Re: I need some help to remember

WOW you guys want me to get to work!

Much of this I can cut through, some will take longer maybe till morning.

In no particular order
No routers: standard install
One cable modem
Buckeye Cable Toledo OH = Previously (always) Terrific and spoken to regarding searching for modem while I was offline. They could.
Internet connection fine, after reset of modem. (except additional traffic)
Computer very responsive

Here is a SS of me currently.

I hope I do this correctly>

 

[pat mcgroin]

Re: I need some help to remember

Ok Im a little more clear headed this morning.
Hers a SS with Avast being the only program that should be able to see out.
Also here is a shot of the protocols running.

Also I forgot to mention above the modem is a ARRIS model TM502G.
It is a cable/phone modem withe phone section not in use.

I see in the netstat list there are some ports with consecutive numbers and know that generally that isnt so good.
Im going to try to run netstat a few more times and see if the ports change and also to try to get the PID number to see if I can retermine what is behind them.

If you or I realize that I missed something I will provide it.
Right now Im in an edit window and cant see the above posts.

 

[pat mcgroin]

Re: I need some help to remember

I couldnt post this above but this is a shot at boot with the connection disabled just in case it should prove to be helpful.

 

[johnwill]

Re: I need some help to remember

Your NETSTAT doesn't seem that odd, here's one from a fully working system. I don't see anything with yours that would indicate a problem.

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\John Will>netstat -an

Active Connections

Proto Local Address Foreign Address State
TCP 0.0.0.0:7 0.0.0.0:0 LISTENING
TCP 0.0.0.0:9 0.0.0.0:0 LISTENING
TCP 0.0.0.0:13 0.0.0.0:0 LISTENING
TCP 0.0.0.0:17 0.0.0.0:0 LISTENING
TCP 0.0.0.0:19 0.0.0.0:0 LISTENING
TCP 0.0.0.0:80 0.0.0.0:0 LISTENING
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:443 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 0.0.0.0:515 0.0.0.0:0 LISTENING
TCP 0.0.0.0:554 0.0.0.0:0 LISTENING
TCP 0.0.0.0:2869 0.0.0.0:0 LISTENING
TCP 0.0.0.0:5357 0.0.0.0:0 LISTENING
TCP 0.0.0.0:5800 0.0.0.0:0 LISTENING
TCP 0.0.0.0:5900 0.0.0.0:0 LISTENING
TCP 0.0.0.0:8599 0.0.0.0:0 LISTENING
TCP 0.0.0.0:10243 0.0.0.0:0 LISTENING
TCP 0.0.0.0:47544 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49152 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49153 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49154 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49155 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49184 0.0.0.0:0 LISTENING
TCP 127.0.0.1:51266 127.0.0.1:51267 ESTABLISHED
TCP 127.0.0.1:51267 127.0.0.1:51266 ESTABLISHED
TCP 127.0.0.1:51268 127.0.0.1:51269 ESTABLISHED
TCP 127.0.0.1:51269 127.0.0.1:51268 ESTABLISHED
TCP 127.0.0.1:65231 127.0.0.1:65232 ESTABLISHED
TCP 127.0.0.1:65232 127.0.0.1:65231 ESTABLISHED
TCP 127.0.0.1:65233 127.0.0.1:65234 ESTABLISHED
TCP 127.0.0.1:65234 127.0.0.1:65233 ESTABLISHED
TCP 192.168.0.2:139 0.0.0.0:0 LISTENING
TCP 192.168.0.2:8599 208.105.11.210:1315 TIME_WAIT
TCP 192.168.0.2:51193 98.24.65.86:61639 ESTABLISHED
TCP 192.168.0.2:51208 192.168.0.7:139 ESTABLISHED
TCP 192.168.0.2:51235 74.112.149.130:443 ESTABLISHED
TCP 192.168.0.2:51537 97.113.219.130:45842 TIME_WAIT
TCP [::]:7 [::]:0 LISTENING
TCP [::]:9 [::]:0 LISTENING
TCP [::]:13 [::]:0 LISTENING
TCP [::]:17 [::]:0 LISTENING
TCP [::]:19 [::]:0 LISTENING
TCP [::]:135 [::]:0 LISTENING
TCP [::]:445 [::]:0 LISTENING
TCP [::]:515 [::]:0 LISTENING
TCP [::]:554 [::]:0 LISTENING
TCP [::]:2869 [::]:0 LISTENING
TCP [::]:5357 [::]:0 LISTENING
TCP [::]:10243 [::]:0 LISTENING
TCP [::]:47544 [::]:0 LISTENING
TCP [::]:49152 [::]:0 LISTENING
TCP [::]:49153 [::]:0 LISTENING
TCP [::]:49154 [::]:0 LISTENING
TCP [::]:49155 [::]:0 LISTENING
TCP [::]:49184 [::]:0 LISTENING
UDP 0.0.0.0:7 *:*
UDP 0.0.0.0:9 *:*
UDP 0.0.0.0:13 *:*
UDP 0.0.0.0:17 *:*
UDP 0.0.0.0:19 *:*
UDP 0.0.0.0:68 *:*
UDP 0.0.0.0:427 *:*
UDP 0.0.0.0:427 *:*
UDP 0.0.0.0:443 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:5004 *:*
UDP 0.0.0.0:5005 *:*
UDP 0.0.0.0:5355 *:*
UDP 0.0.0.0:8599 *:*
UDP 0.0.0.0:50560 *:*
UDP 0.0.0.0:50567 *:*
UDP 0.0.0.0:55164 *:*
UDP 127.0.0.1:1900 *:*
UDP 127.0.0.1:58950 *:*
UDP 127.0.0.1:62409 *:*
UDP 127.0.0.1:64066 *:*
UDP 192.168.0.2:137 *:*
UDP 192.168.0.2:138 *:*
UDP 192.168.0.2:427 *:*
UDP 192.168.0.2:1900 *:*
UDP 192.168.0.2:64065 *:*
UDP [::]:7 *:*
UDP [::]:9 *:*
UDP [::]:13 *:*
UDP [::]:17 *:*
UDP [::]:19 *:*
UDP [::]:3702 *:*
UDP [::]:3702 *:*
UDP [::]:3702 *:*
UDP [::]:3702 *:*
UDP [::]:5004 *:*
UDP [::]:5005 *:*
UDP [::]:50561 *:*
UDP [::]:50568 *:*
UDP [::]:55165 *:*
UDP [::1]:1900 *:*
UDP [::1]:64064 *:*

C:\Users\John Will>

 

[pat mcgroin]

Re: I need some help to remember

My connection does seem calmer today for some reason.
I havent changed anything.

I did run netstat with a variety of switches and didnt notice anything unusual to speak of.
All expected programs initializing the events.
I even ran it with the timer set to 5 seconds to see if any connections were coming and going but didnt see any.

Im not sure exactly what was going on so Ill leave this post open for the rest of the day just in case it acts up again.

Thanks to both of you for your quick attention to this.

Pat

 

[2xg]

Re: I need some help to remember

You're welcome Pat. Just let us know if you still need help.

 

[pat mcgroin]

Re: I need some help to remember

So Far so good.
I wish I knew what happened though.
It annoys me when I cant figure out a reason, but since it isnt doing it anymore
I guess I go Merrily along.

Again Thanks and Ill close this up now.