Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

TCPview - are these results normal?


  • Please log in to reply
3 replies to this topic

#1 purplesaint

purplesaint

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:05:35 AM

Posted 18 August 2015 - 03:29 AM

closed, i got my answers, thank you.


Edited by purplesaint, 18 August 2015 - 07:41 PM.


BC AdBot (Login to Remove)

 


#2 mremski

mremski

  • Members
  • 493 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NH
  • Local time:12:35 AM

Posted 18 August 2015 - 09:04 AM

Anything with a destination port of 80 is HTTP traffic.  I'm guessing you have/had a browser open?

Anything with a destination port of 443 is HTTPS traffic.  I'm guessing you have/had a browser open?

Basically, yes, that list looks fairly normal.

I'm guessing your machine IPV4 address is 192.168.0.10?

You can always type in "whois ip address" into the browser search bar (replace ip address with the address you wonder about like 191.234.4.50)


FreeBSD since 3.3, only time I touch Windows is to fix my wife's computer


#3 DeimosChaos

DeimosChaos

  • BC Advisor
  • 1,420 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:United States, Delaware
  • Local time:12:35 AM

Posted 18 August 2015 - 11:07 AM

I agree with mremski. It all looks pretty normal to me. You have a ton of (A.) tabs open in Chrome... or (B.) lots of installed extensions in Chrome -> which is why you see a lot of chrome.exe.


OS - Ubuntu 14.04/16.04 & Windows 10
Custom Desktop PC / Lenovo Y580 / Sager NP8258 / Dell XPS 13 (9350)
_____________________________________________________
Bachelor of Science in Computing Security from Drexel University
Security +


#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,119 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:35 AM

Posted 18 August 2015 - 02:08 PM

TCPView is a Windows program that will show you detailed listings of all TCP and UDP endpoints on your system, including the local and remote addresses and state of TCP connections. On Windows Server 2008, Vista, and XP, TCPView also reports the name of the process that owns the endpoint. When you start TCPView it will enumerate all active TCP and UDP endpoints, resolving all IP addresses to their domain name versions. You can use a toolbar button or menu item to toggle the display of resolved names. On Windows XP systems, TCPView shows the name of the process that owns each endpoint.

TCPView for Windows

The column for Remote Address shows the localhost for your Local Address. The Local Port is the port(s) used on your machine and those listed as LISTENING are the ports that are open to establish (accept) connections with another computer. For well-known ports listed under Local Port, TCPView will display the name of the service such as ntp (network time protocol) instead of the port number (123). Keep in mind that it is normal for TCPView to show changes as additional processes initiate connections or the connections change state.
  • Lines that appear in green are newly opened ports.
  • Lines that appear in red are connections that are expected to close.
If TCPView indicates a number of connections, some of them can be explained by applications that run in the background which are attempting to update. File sharing programs and some online games also make connections. Normally if your firewall is configured properly, there should be very few open ports.These are tools to investigate running processes, programs that run at startup, services and gather additional information to identify them or resolve problems:These tools will provide information about each process, CPU usage, file description and its location. Most of them are stand-alone portable apps in a zip file so no installation is necessary. The first five tools are especially useful and I use them all to compare the information each provides.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users