1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Port Usage

Discussion in 'General Security' started by needafix, Apr 3, 2010.

Thread Status:
Not open for further replies.
Advertisement
  1. needafix

    needafix Thread Starter

    Joined:
    Mar 23, 2005
    Messages:
    983
    I'm curious about "System" usage of these ports. What executable is "System" and why is it on these ports?

    FPort v2.0 - TCP/IP Process to Port Mapper
    Copyright 2000 by Foundstone, Inc.
    http://www.foundstone.com

    Pid Process Port Proto Path
    4 System -> 139 TCP
    4 System -> 445 TCP
    336 ccSvcHst -> 1025 TCP C:\Program Files\Norton Internet Security\Engine\16.8.0.41\ccSvcHst.exe
    3184 firefox -> 1050 TCP C:\Program Files\Mozilla Firefox\firefox.exe
    3184 firefox -> 1051 TCP C:\Program Files\Mozilla Firefox\firefox.exe
    3184 firefox -> 1052 TCP C:\Program Files\Mozilla Firefox\firefox.exe
    3184 firefox -> 1053 TCP C:\Program Files\Mozilla Firefox\firefox.exe
    2412 YahooMessenger -> 2030 TCP C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    2412 YahooMessenger -> 2031 TCP C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    0 System -> 2047 TCP
    0 System -> 2048 TCP
    0 System -> 2049 TCP
    0 System -> 2050 TCP
    0 System -> 2052 TCP
    0 System -> 2053 TCP
    0 System -> 2054 TCP
    0 System -> 2055 TCP
    0 System -> 2056 TCP
    0 System -> 2057 TCP
    0 System -> 2059 TCP
    2412 YahooMessenger -> 2066 TCP C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    0 System -> 2070 TCP
    0 System -> 2071 TCP
    0 System -> 2072 TCP
    2412 YahooMessenger -> 2082 TCP C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    0 System -> 2107 TCP
    0 System -> 2152 TCP
    3184 firefox -> 2154 TCP C:\Program Files\Mozilla Firefox\firefox.exe
    3184 firefox -> 2175 TCP C:\Program Files\Mozilla Firefox\firefox.exe
    3184 firefox -> 2189 TCP C:\Program Files\Mozilla Firefox\firefox.exe
    3184 firefox -> 2191 TCP C:\Program Files\Mozilla Firefox\firefox.exe
    3184 firefox -> 2192 TCP C:\Program Files\Mozilla Firefox\firefox.exe
    2412 YahooMessenger -> 5101 TCP C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    3184 firefox -> 137 UDP C:\Program Files\Mozilla Firefox\firefox.exe
    3184 firefox -> 138 UDP C:\Program Files\Mozilla Firefox\firefox.exe
    4 System -> 445 UDP
    2412 YahooMessenger -> 500 UDP C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
    3184 firefox -> 1027 UDP C:\Program Files\Mozilla Firefox\firefox.exe
    3184 firefox -> 2063 UDP C:\Program Files\Mozilla Firefox\firefox.exe
    336 ccSvcHst -> 4500 UDP C:\Program Files\Norton Internet Security\Engine\16.8.0.41\ccSvcHst.exe


    C:\WINDOWS>
     
  2. lunarlander

    lunarlander

    Joined:
    Sep 21, 2007
    Messages:
    11,879
    Use Windows' "netstat -an" command. It tells you which ports are LISTENING on the internet. You need only be concerned with listening ports. The other ports that are not marked as listening are for local use.
     
  3. needafix

    needafix Thread Starter

    Joined:
    Mar 23, 2005
    Messages:
    983
    No ID on these:

    Microsoft Windows XP [Version 5.1.2600]
    (C) Copyright 1985-2001 Microsoft Corp.

    C:\Documents and Settings\Administrator>netstat -an

    Active Connections

    Proto Local Address Foreign Address State
    TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
    TCP 0.0.0.0:5101 0.0.0.0:0 LISTENING
    TCP 127.0.0.1:1027 0.0.0.0:0 LISTENING
    C:\Documents and Settings\Administrator>
     
  4. NeonFx

    NeonFx Malware Specialist

    Joined:
    Oct 22, 2008
    Messages:
    4,811
    445 is used by Windows and is commonly open.

    5101 was identified in your earlier scan as Yahoo Messenger.

    1027 was identified in your earlier scan as Firefox.



    try netstat -abn

    It'll list the processes.
     
  5. needafix

    needafix Thread Starter

    Joined:
    Mar 23, 2005
    Messages:
    983
    Yeah that netstat -abn is the good one.
     
  6. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/914543

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice