[Xitami] Port 80 mystery

Toni McConnel Toni at Gaia-Enterprises.org
Sat Apr 7 04:14:53 CEST 2007


Hi, Thomas...

Here's what I just sent Magus.  I just don't see any port 80 in there.  ????

Here's the stuff that came up with netstat -a -b.  I don't see anything 
but mysql server -- is that the problem?  Or am I missing something?


Active Connections

   Proto  Local Address          Foreign Address        State           PID
   TCP    LULU:microsoft-ds      LULU:0                 LISTENING       4
   [System]

   TCP    LULU:netbios-ssn       LULU:0                 LISTENING       4
   [System]

   TCP    LULU:1140              localhost:1141         ESTABLISHED     3748
   [thunderbird.exe]

   TCP    LULU:1141              localhost:1140         ESTABLISHED     3748
   [thunderbird.exe]

   TCP    LULU:1338              64.124.109.201.t426.aws.com:http 
ESTABLISHED     2488
   [Weather.exe]

   UDP    LULU:1027              *:*                                    1336
   C:\WINDOWS\system32\mswsock.dll
   c:\windows\system32\WS2_32.dll
   c:\windows\system32\DNSAPI.dll
   c:\windows\system32\dnsrslvr.dll
   C:\WINDOWS\system32\RPCRT4.dll
   [svchost.exe]

   UDP    LULU:ms-sql-m          *:*                                    720
   [sqlservr.exe]

   UDP    LULU:3456              *:*                                    356
   [inetinfo.exe]

   UDP    LULU:isakmp            *:*                                    816
   [lsass.exe]

   UDP    LULU:4500              *:*                                    816
   [lsass.exe]

   UDP    LULU:microsoft-ds      *:*                                    4
   [System]

   UDP    LULU:1030              *:*                                    1336
   C:\WINDOWS\system32\mswsock.dll
   c:\windows\system32\WS2_32.dll
   c:\windows\system32\DNSAPI.dll
   c:\windows\system32\dnsrslvr.dll
   C:\WINDOWS\system32\RPCRT4.dll
   [svchost.exe]

   UDP    LULU:ntp               *:*                                    1180
   c:\windows\system32\WS2_32.dll
   c:\windows\system32\w32time.dll
   ntdll.dll
   C:\WINDOWS\system32\kernel32.dll
   [svchost.exe]

   UDP    LULU:1052              *:*                                    2780
   [Swift To-Do List.exe]

   UDP    LULU:1055              *:*                                    2488
   [Weather.exe]

   UDP    LULU:1026              *:*                                    2352
   [gnotify.exe]

   UDP    LULU:1033              *:*                                    280
   [Explorer.EXE]

   UDP    LULU:1900              *:*                                    1416
   c:\windows\system32\WS2_32.dll
   c:\windows\system32\ssdpsrv.dll
   ntdll.dll
   C:\WINDOWS\system32\kernel32.dll
   [svchost.exe]

   UDP    LULU:netbios-dgm       *:*                                    4
   [System]

   UDP    LULU:netbios-ns        *:*                                    4
   [System]

   UDP    LULU:1900              *:*                                    1416
   c:\windows\system32\WS2_32.dll
   c:\windows\system32\ssdpsrv.dll
   ntdll.dll
   C:\WINDOWS\system32\kernel32.dll
   [svchost.exe]

   UDP    LULU:ntp               *:*                                    1180
   c:\windows\system32\WS2_32.dll
   c:\windows\system32\w32time.dll
   ntdll.dll
   C:\WINDOWS\system32\kernel32.dll
   [svchost.exe]


Microsoft Windows XP [Version 5.1.2600]







Here's the temp.txt stuff:


Active Connections

  Proto  Local Address          Foreign Address        State
  TCP    LULU:1140              localhost:1141         ESTABLISHED
  TCP    LULU:1141              localhost:1140         ESTABLISHED

Microsoft Windows XP [Version 5.1.2600]


Magus wrote:
> Hello Toni,
>
> Friday, April 6, 2007, 5:53:05 PM, you wrote:
>
>   
>> Hi, Magus....
>>     
>
>   
>> I have almost no experience using command prompt.  When I open it, it 
>> comes up with the My Documents directory and I've forgotten how I get 
>> out of that back to the C: prompt.  ???
>>     
>
> Okay. First which version of Windows are you running? Windows 1.0,
> 2.0, 3.0, 3.1, 3.11, 95, 98, ME, NT (3&4), 2000, XP, Server 2003, or
> Vista? They _all_ have a "My Documents" directory.
>
> To Change Directories you use the CD command. To change from My
> Documents to C:\ you would type "CD \" (without the quotes) since My
> Documents is usually (not always, but usually) on the C: drive. You
> don't need to CD out of "My Documents" to use netstat or, in general
> any of the built in Windows command line programs in XP, other
> versions of Windows are another story though.
>
> At the command prompt just type "netstat /?" to learn what options to
> the netstat commands are available. In XP you can also click on
> "Start" then on "Help and Support" and then type "netstat" in the
> "Search" box to learn what options are available. In general you will
> want the "-a" option. This will display a long list of all (hence -a)
> the connections and ports that are active. The listing will look
> something like this:
>
> C:\Documents and Settings\Magus>netstat -a
>
> Active Connections
>
>   Proto  Local Address          Foreign Address        State
>   TCP    brewhau:ftp            brewhau:0              LISTENING
>   TCP    brewhau:http           brewhau:0              LISTENING
>   TCP    brewhau:81             brewhau:0              LISTENING
>   TCP    brewhau:epmap          brewhau:0              LISTENING
>   TCP    brewhau:microsoft-ds   brewhau:0              LISTENING
>   TCP    brewhau:1035           brewhau:0              LISTENING
>   TCP    brewhau:1801           brewhau:0              LISTENING
>   TCP    brewhau:2103           brewhau:0              LISTENING
>   TCP    brewhau:2105           brewhau:0              LISTENING
>   TCP    brewhau:2107           brewhau:0              LISTENING
>   TCP    brewhau:33178          brewhau:0              LISTENING
>   TCP    brewhau:smtp           brewhau:0              LISTENING
>   TCP    brewhau:pop3           brewhau:0              LISTENING
>   TCP    brewhau:1040           brewhau:0              LISTENING
>   TCP    brewhau:3968           localhost:3969         ESTABLISHED
>   TCP    brewhau:3969           localhost:3968         ESTABLISHED
>   TCP    brewhau:10110          brewhau:0              LISTENING
>   TCP    brewhau:32025          brewhau:0              LISTENING
>   TCP    brewhau:32026          brewhau:0              LISTENING
>   TCP    brewhau:32027          brewhau:0              LISTENING
>   TCP    brewhau:32028          brewhau:0              LISTENING
>   TCP    brewhau:32110          brewhau:0              LISTENING
>   TCP    brewhau:32111          brewhau:0              LISTENING
>   TCP    brewhau:32112          brewhau:0              LISTENING
>   TCP    brewhau:32113          brewhau:0              LISTENING
>   TCP    brewhau:netbios-ssn    brewhau:0              LISTENING
>   TCP    brewhau:netbios-ssn    brewhau:0              LISTENING
>   TCP    brewhau:netbios-ssn    brewhau:0              LISTENING
>   TCP    brewhau:4347           ip72-192-172-173.sd.sd.cox.net:41056  ESTABLISHED
>   TCP    brewhau:4355           85-210-133-230.dsl.pipex.com:3443  ESTABLISHED
>   TCP    brewhau:4391           dyn-dsl-mb-66-79-240-80.nexicom.net:26936  ESTABLISHED
>   TCP    brewhau:33178          c-24-11-180-122.hsd1.mi.comcast.net:58334  ESTABLISHED
>   TCP    brewhau:33178          173.79.broadband4.iol.cz:1054  ESTABLISHED
>   TCP    brewhau:33178          rev-88-157-67-150.tvtel.pt:4976  ESTABLISHED
>   TCP    brewhau:33178          91.140.143.31:2247     ESTABLISHED
>   TCP    brewhau:33178          125-238-123-105.broadband-telecom.global-gateway.net.nz:1650  ESTABLISHED
>   TCP    brewhau:33178          20119180154.user.veloxzone.com.br:3276  ESTABLISHED
>   TCP    brewhau:33178          NTL208H101-78-30.nt.net:2825  ESTABLISHED
>   TCP    brewhau:33178          pool.dsl.166.042.cvinternet.net:2433  ESTABLISHED
>   UDP    brewhau:microsoft-ds   *:*
>   UDP    brewhau:isakmp         *:*
>   UDP    brewhau:1033           *:*
>   UDP    brewhau:1044           *:*
>   UDP    brewhau:1057           *:*
>   UDP    brewhau:1089           *:*
>   UDP    brewhau:ms-sql-m       *:*
>   UDP    brewhau:3527           *:*
>   UDP    brewhau:4040           *:*
>   UDP    brewhau:4335           *:*
>   UDP    brewhau:4500           *:*
>   UDP    brewhau:33178          *:*
>   UDP    brewhau:ntp            *:*
>   UDP    brewhau:1036           *:*
>   UDP    brewhau:1631           *:*
>   UDP    brewhau:1900           *:*
>   UDP    brewhau:ntp            *:*
>   UDP    brewhau:netbios-ns     *:*
>   UDP    brewhau:netbios-dgm    *:*
>   UDP    brewhau:router         *:*
>   UDP    brewhau:1900           *:*
>   UDP    brewhau:ntp            *:*
>   UDP    brewhau:netbios-ns     *:*
>   UDP    brewhau:netbios-dgm    *:*
>   UDP    brewhau:router         *:*
>   UDP    brewhau:1900           *:*
>   UDP    brewhau:ntp            *:*
>   UDP    brewhau:netbios-ns     *:*
>   UDP    brewhau:netbios-dgm    *:*
>   UDP    brewhau:router         *:*
>   UDP    brewhau:1900           *:*
>   UDP    brewhau:ntp            *:*
>   UDP    brewhau:router         *:*
>   UDP    brewhau:1900           *:*
>
> C:\Documents and Settings\Magus
>
> which is an example from my system. Yours should be somewhat shorter.
> 8=))
>
> The important part is usually near the top in the column "Local
> Address". It will read something like "<your computer's name>:http" or
> "<your computers name>:80". In the listing above, brewhau is my
> systems name and the important line is the one with "brewhau:http" in
> it. If you see either of these lines then you likely have PWS or
> Personal Web Server running. This is installed without your permission
> or knowledge on all versions of Windows from 98 and up when you
> install Windows.
>
> Without knowing which version of Windows you are running I can't help
> much more than this because how you turn off PWS depends on which
> version of Windows you are running. It would help me greatly to help
> you if you could type the following lines at the command prompt:
>
> netstat -a >temp.txt
> ver >>temp.txt
>
> then send me the contents of the newly created temp.txt file.
>
>   


--
Xitami Users Mailing List -- For Xitami support
To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami




More information about the Xitami mailing list