[Xitami] Port 80 mystery
Toni McConnel
Toni at Gaia-Enterprises.org
Sat Apr 7 03:58:08 CEST 2007
Here's the temp.txt stuff:
Active Connections
Proto Local Address Foreign Address State
TCP LULU:1140 localhost:1141 ESTABLISHED
TCP LULU:1141 localhost:1140 ESTABLISHED
Microsoft Windows XP [Version 5.1.2600]
Magus wrote:
> Hello Toni,
>
> Friday, April 6, 2007, 5:53:05 PM, you wrote:
>
>
>> Hi, Magus....
>>
>
>
>> I have almost no experience using command prompt. When I open it, it
>> comes up with the My Documents directory and I've forgotten how I get
>> out of that back to the C: prompt. ???
>>
>
> Okay. First which version of Windows are you running? Windows 1.0,
> 2.0, 3.0, 3.1, 3.11, 95, 98, ME, NT (3&4), 2000, XP, Server 2003, or
> Vista? They _all_ have a "My Documents" directory.
>
> To Change Directories you use the CD command. To change from My
> Documents to C:\ you would type "CD \" (without the quotes) since My
> Documents is usually (not always, but usually) on the C: drive. You
> don't need to CD out of "My Documents" to use netstat or, in general
> any of the built in Windows command line programs in XP, other
> versions of Windows are another story though.
>
> At the command prompt just type "netstat /?" to learn what options to
> the netstat commands are available. In XP you can also click on
> "Start" then on "Help and Support" and then type "netstat" in the
> "Search" box to learn what options are available. In general you will
> want the "-a" option. This will display a long list of all (hence -a)
> the connections and ports that are active. The listing will look
> something like this:
>
> C:\Documents and Settings\Magus>netstat -a
>
> Active Connections
>
> Proto Local Address Foreign Address State
> TCP brewhau:ftp brewhau:0 LISTENING
> TCP brewhau:http brewhau:0 LISTENING
> TCP brewhau:81 brewhau:0 LISTENING
> TCP brewhau:epmap brewhau:0 LISTENING
> TCP brewhau:microsoft-ds brewhau:0 LISTENING
> TCP brewhau:1035 brewhau:0 LISTENING
> TCP brewhau:1801 brewhau:0 LISTENING
> TCP brewhau:2103 brewhau:0 LISTENING
> TCP brewhau:2105 brewhau:0 LISTENING
> TCP brewhau:2107 brewhau:0 LISTENING
> TCP brewhau:33178 brewhau:0 LISTENING
> TCP brewhau:smtp brewhau:0 LISTENING
> TCP brewhau:pop3 brewhau:0 LISTENING
> TCP brewhau:1040 brewhau:0 LISTENING
> TCP brewhau:3968 localhost:3969 ESTABLISHED
> TCP brewhau:3969 localhost:3968 ESTABLISHED
> TCP brewhau:10110 brewhau:0 LISTENING
> TCP brewhau:32025 brewhau:0 LISTENING
> TCP brewhau:32026 brewhau:0 LISTENING
> TCP brewhau:32027 brewhau:0 LISTENING
> TCP brewhau:32028 brewhau:0 LISTENING
> TCP brewhau:32110 brewhau:0 LISTENING
> TCP brewhau:32111 brewhau:0 LISTENING
> TCP brewhau:32112 brewhau:0 LISTENING
> TCP brewhau:32113 brewhau:0 LISTENING
> TCP brewhau:netbios-ssn brewhau:0 LISTENING
> TCP brewhau:netbios-ssn brewhau:0 LISTENING
> TCP brewhau:netbios-ssn brewhau:0 LISTENING
> TCP brewhau:4347 ip72-192-172-173.sd.sd.cox.net:41056 ESTABLISHED
> TCP brewhau:4355 85-210-133-230.dsl.pipex.com:3443 ESTABLISHED
> TCP brewhau:4391 dyn-dsl-mb-66-79-240-80.nexicom.net:26936 ESTABLISHED
> TCP brewhau:33178 c-24-11-180-122.hsd1.mi.comcast.net:58334 ESTABLISHED
> TCP brewhau:33178 173.79.broadband4.iol.cz:1054 ESTABLISHED
> TCP brewhau:33178 rev-88-157-67-150.tvtel.pt:4976 ESTABLISHED
> TCP brewhau:33178 91.140.143.31:2247 ESTABLISHED
> TCP brewhau:33178 125-238-123-105.broadband-telecom.global-gateway.net.nz:1650 ESTABLISHED
> TCP brewhau:33178 20119180154.user.veloxzone.com.br:3276 ESTABLISHED
> TCP brewhau:33178 NTL208H101-78-30.nt.net:2825 ESTABLISHED
> TCP brewhau:33178 pool.dsl.166.042.cvinternet.net:2433 ESTABLISHED
> UDP brewhau:microsoft-ds *:*
> UDP brewhau:isakmp *:*
> UDP brewhau:1033 *:*
> UDP brewhau:1044 *:*
> UDP brewhau:1057 *:*
> UDP brewhau:1089 *:*
> UDP brewhau:ms-sql-m *:*
> UDP brewhau:3527 *:*
> UDP brewhau:4040 *:*
> UDP brewhau:4335 *:*
> UDP brewhau:4500 *:*
> UDP brewhau:33178 *:*
> UDP brewhau:ntp *:*
> UDP brewhau:1036 *:*
> UDP brewhau:1631 *:*
> UDP brewhau:1900 *:*
> UDP brewhau:ntp *:*
> UDP brewhau:netbios-ns *:*
> UDP brewhau:netbios-dgm *:*
> UDP brewhau:router *:*
> UDP brewhau:1900 *:*
> UDP brewhau:ntp *:*
> UDP brewhau:netbios-ns *:*
> UDP brewhau:netbios-dgm *:*
> UDP brewhau:router *:*
> UDP brewhau:1900 *:*
> UDP brewhau:ntp *:*
> UDP brewhau:netbios-ns *:*
> UDP brewhau:netbios-dgm *:*
> UDP brewhau:router *:*
> UDP brewhau:1900 *:*
> UDP brewhau:ntp *:*
> UDP brewhau:router *:*
> UDP brewhau:1900 *:*
>
> C:\Documents and Settings\Magus
>
> which is an example from my system. Yours should be somewhat shorter.
> 8=))
>
> The important part is usually near the top in the column "Local
> Address". It will read something like "<your computer's name>:http" or
> "<your computers name>:80". In the listing above, brewhau is my
> systems name and the important line is the one with "brewhau:http" in
> it. If you see either of these lines then you likely have PWS or
> Personal Web Server running. This is installed without your permission
> or knowledge on all versions of Windows from 98 and up when you
> install Windows.
>
> Without knowing which version of Windows you are running I can't help
> much more than this because how you turn off PWS depends on which
> version of Windows you are running. It would help me greatly to help
> you if you could type the following lines at the command prompt:
>
> netstat -a >temp.txt
> ver >>temp.txt
>
> then send me the contents of the newly created temp.txt file.
>
>
More information about the Xitami
mailing list