Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Trying to understand a netstat -an entrie


  • Please log in to reply
1 reply to this topic

#1 CFred

CFred

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Maine
  • Local time:07:11 PM

Posted 17 July 2014 - 01:52 PM

Correct place for this?  

 

For whatever reason, well actually I ran an eset scan and came up with a few entries it quarantined that Norton didn't catch.  I did netstat -an, and had a udp entry I've never seen before.  Searched far and wide and couldn't find any info on it.  Here it is.

 

C:\Users\Looney>netstat -an

 

Active Connections

 

  Proto  Local Address          Foreign Address        State
  TCP    0.0.0.0:135            0.0.0.0:0              LISTENING
  TCP    0.0.0.0:49152          0.0.0.0:0              LISTENING
  TCP    0.0.0.0:49153          0.0.0.0:0              LISTENING
  TCP    0.0.0.0:49154          0.0.0.0:0              LISTENING
  TCP    0.0.0.0:49155          0.0.0.0:0              LISTENING
  TCP    0.0.0.0:49157          0.0.0.0:0              LISTENING
  TCP    0.0.0.0:49158          0.0.0.0:0              LISTENING
  TCP    127.0.0.1:2559         0.0.0.0:0              LISTENING
  TCP    192.168.1.4:51659      74.125.225.147:443     TIME_WAIT
  TCP    [::]:135               [::]:0                 LISTENING
  TCP    [::]:49152             [::]:0                 LISTENING
  TCP    [::]:49153             [::]:0                 LISTENING
  TCP    [::]:49154             [::]:0                 LISTENING
  TCP    [::]:49155             [::]:0                 LISTENING
  TCP    [::]:49157             [::]:0                 LISTENING
  TCP    [::]:49159             [::]:0                 LISTENING
  UDP    0.0.0.0:500            *:*
  UDP    0.0.0.0:4500           *:*
  UDP    127.0.0.1:48000        *:*
  UDP    [::]:500               *:*
  UDP    [::]:4500              *:*
  UDP    [fe80::15fd:886:b6cd:fee9%10]:546  *:*

 

It is the last entry I was curious about.  It doesn't always show up.  Also if I'm on your site when running netstat, wouldn't it show being established? 

 

Thanks in advance

Fred


Edited by hamluis, 17 July 2014 - 03:29 PM.
Moved from Win 7 to Am I Infected - Hamluis.

___________________________
Klipsch---A Legend in Sound

BC AdBot (Login to Remove)

 


m

#2 sflatechguy

sflatechguy

  • BC Advisor
  • 2,164 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:07:11 PM

Posted 17 July 2014 - 02:12 PM

For what it's worth, that's an IPv6 address. Not sure what it resolves to -- might it be the IPv6 address assigned to your PC? It's using port 546, which is the DHCP client port for IPv6.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users