Question I've Wanted To Ask For A While

**3rd gen noob** · 12-01-2003, 06:34 AM

whenever i do a netstat, the only entry which seems to be there every single time is:

"TCP computername:microsoft-ds computername:0 LISTENING"

what does this actually do?

tia

**balamm** · 12-01-2003, 06:50 AM

I think that just indicates your computer (computername:microsoft-ds) is listening on tcp to another computer ( computername:0 ) = no active connection ??

what switches are you using? netstat -a should give you something like this that shows all active services and ports

Code:

Active Connections

 &nbsp;Proto &nbsp;Local Address &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Foreign Address &nbsp; &nbsp; &nbsp; &nbsp;State
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;http &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;epmap &nbsp;www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;microsoft-ds &nbsp;www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;1026 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;1027 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;1028 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;1029 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;1099 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;1255 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;1327 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;ms-sql-s &nbsp;www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;1631 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;1722 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;1734 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;1817 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;1940 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;1998 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2014 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2028 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2038 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2054 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2062 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2071 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2073 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2075 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2077 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2079 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2084 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2090 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2092 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2094 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2096 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2098 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2100 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2102 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2104 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2106 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2108 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2110 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2112 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2114 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2116 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2118 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2120 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2122 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2124 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2126 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2128 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2132 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2134 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2135 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2137 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2139 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2145 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2147 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2149 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2151 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2152 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2154 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2169 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2173 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2175 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2177 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2179 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2181 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2183 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2185 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2187 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2189 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2192 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2194 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2196 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2198 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2200 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2425 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;4346 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;4662 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;6684 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;9582 &nbsp; www-a-3592ba7e1&#58;0 &nbsp; &nbsp; &nbsp;LISTENING
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;1940 &nbsp; 200.82.37.184&#58;4665 &nbsp; &nbsp; FIN_WAIT_1
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;1987 &nbsp; pacnet1.xs4all.nl&#58;4662 &nbsp;TIME_WAIT
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;1991 &nbsp; host81-128-172-220.in-addr.btopenworld.com&#58;4662
 TIME_WAIT
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;1998 &nbsp; 217.165.185.3&#58;4662 &nbsp; &nbsp; TIME_WAIT
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2012 &nbsp; ca-montpellier-3-195.w80-8.abo.wanadoo.fr&#58;4662
TIME_WAIT
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2014 &nbsp; a213-22-47-43.netcabo.pt&#58;4662 &nbsp;ESTABLISHED
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2020 &nbsp; vodsl-391.vo.lu&#58;4662 &nbsp; TIME_WAIT
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2028 &nbsp; 155.Red-81-32-32.pooles.rima-tde.net&#58;4662 &nbsp;TIME_
WAIT
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2038 &nbsp; a7057.upc-a.chello.nl&#58;4662 &nbsp;FIN_WAIT_1
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2040 &nbsp; CPE000102914ee3-CM014270032935.cpe.net.cable.rog
ers.com&#58;4662 &nbsp;TIME_WAIT
 &nbsp;TCP &nbsp; &nbsp;www-a-3592ba7e1&#58;2042 &nbsp; wnpgmb01dc2-39-219.dynamic.mts.net&#58;4662 &nbsp;TIME_WA

**3rd gen noob** · 12-01-2003, 06:53 AM

Originally posted by balamm@1 December 2003 - 05:50
I think that just indicates your computer (computername:microsoft-ds) is listening on tcp to another computer ( computername:0 ) = no active connection ??

what switches are you using? netstat -a should give you something like this that shows all active services and ports

yeah, netstat -a was what i used
so that 'connection' isn't really an active connection at all...?

**balamm** · 12-01-2003, 07:00 AM

It's a listening port. If you have printer and file sharring enabled in XP, that's what it is. It listens for incoming requests. On a desktop, it can be a vulnerability for dos attack and other things.

"Microsoft-DS"....it's the service/protocol name for tcp\udp port 445 which as you may know is for File\Print Sharing.

**3rd gen noob** · 12-01-2003, 07:02 AM

Originally posted by balamm@1 December 2003 - 06:00
It's a listening port. If you have printer and file sharring enabled in XP, that's what it is. It listens for incoming requests. On a desktop, it can be a vulnerability for dos attack and other things.

"Microsoft-DS"....it's the service/protocol name for tcp\udp port 445 which as you may know is for File\Print Sharing.

ok, thanks

Thread: Question I've Wanted To Ask For A While

Thread Tools

Bookmarks

Bookmarks

Posting Permissions