Tracing a connection coming into my computer

Anything and Everything about Uplink

Moderators: bert_the_turtle, jelco, Chris, Icepick, Rkiver

Quantum Particle
level3
level3
Posts: 260
Joined: Sat Sep 04, 2004 11:17 am

Tracing a connection coming into my computer

Postby Quantum Particle » Sat Jul 09, 2005 6:52 pm

First off, I know you aren't really 1337 h4xx0rz, but some of you are quite good with computers, so I thought you may be able to help.

My computer keeps connecting to itself at a certain port, and I was wondering if there was any way I could trace what it is actually connecting too, as in which file/folder?

PS I'm not that skilled in the art of computing, so not too many long words please.
PPS when I connect to myself at that port, firefox tells me 'connection refused'.
#Particle man
Particle man
Does whatever a particle can#
My profile!
My forums!
Deepsmeg
level5
level5
Posts: 6508
Joined: Thu Mar 21, 2002 1:26 pm
Location: Register 2102
Contact:

Postby Deepsmeg » Sat Jul 09, 2005 7:12 pm

unless it's a protocol firefox can "talk", it won't work.

I'm going to assume you use Windows, I am going to go further and assume you have an NT based Windows version, thus having semidecent network tools.

Type in netstat -an on a command line and look for anything interesting.
Image
Quantum Particle
level3
level3
Posts: 260
Joined: Sat Sep 04, 2004 11:17 am

Postby Quantum Particle » Sat Jul 09, 2005 7:25 pm

All that said is that it is a UDP connection coming from *:*
:?
#Particle man

Particle man

Does whatever a particle can#

My profile!

My forums!
Deepsmeg
level5
level5
Posts: 6508
Joined: Thu Mar 21, 2002 1:26 pm
Location: Register 2102
Contact:

Postby Deepsmeg » Sat Jul 09, 2005 7:26 pm

That's all it said? Nothing else at all?
Image
Quantum Particle
level3
level3
Posts: 260
Joined: Sat Sep 04, 2004 11:17 am

Postby Quantum Particle » Sat Jul 09, 2005 7:29 pm

Nope, the 'state' column is blank.

P.S. XP SP2, in case it is important anymore.
#Particle man

Particle man

Does whatever a particle can#

My profile!

My forums!
User avatar
ruhoward
level2
level2
Posts: 183
Joined: Tue May 14, 2002 11:43 pm
Location: Toronto

Postby ruhoward » Sat Jul 09, 2005 7:31 pm

that's weird...maybe you can try security task manager(free) to see what program's connecting your pc to another computer.
Quantum Particle
level3
level3
Posts: 260
Joined: Sat Sep 04, 2004 11:17 am

Postby Quantum Particle » Sat Jul 09, 2005 7:35 pm

But the thing is, its connecting to itself, and I want to know where in itself it is connected to. (am I still making sense?)
#Particle man

Particle man

Does whatever a particle can#

My profile!

My forums!
User avatar
Luigi300
level5
level5
Posts: 1615
Joined: Wed May 01, 2002 2:08 pm
Location: :noitacoL
Contact:

Postby Luigi300 » Sat Jul 09, 2005 7:36 pm

OMG SPYWAREZ
Luigi for mod in 2006!
Deepsmeg
level5
level5
Posts: 6508
Joined: Thu Mar 21, 2002 1:26 pm
Location: Register 2102
Contact:

Postby Deepsmeg » Sat Jul 09, 2005 7:46 pm

Code: Select all

  Proto  Local Address          Foreign Address        State
  TCP    0.0.0.0:21             0.0.0.0:0              LISTENING
  TCP    0.0.0.0:25             0.0.0.0:0              LISTENING
  TCP    0.0.0.0:80             0.0.0.0:0              LISTENING
  TCP    0.0.0.0:110            0.0.0.0:0              LISTENING
  TCP    0.0.0.0:135            0.0.0.0:0              LISTENING
  TCP    0.0.0.0:443            0.0.0.0:0              LISTENING
  TCP    0.0.0.0:445            0.0.0.0:0              LISTENING
  TCP    0.0.0.0:1025           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:3389           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:6667           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:8080           0.0.0.0:0              LISTENING
  TCP    0.0.0.0:20025          0.0.0.0:0              LISTENING
  TCP    <MY IP>:2377       <IP>:1863       ESTABLISHED
  TCP    127.0.0.1:1028         0.0.0.0:0              LISTENING
  UDP    0.0.0.0:445            *:*
  UDP    0.0.0.0:500            *:*
  UDP    0.0.0.0:1030           *:*
  UDP    0.0.0.0:1076           *:*
  UDP    0.0.0.0:1186           *:*
  UDP    0.0.0.0:1269           *:*
  UDP    0.0.0.0:1275           *:*
  UDP    0.0.0.0:3456           *:*
  UDP    0.0.0.0:4500           *:*
  UDP    <MY IP>:9          *:*
  UDP    <MY IP>:123        *:*
  UDP    <MY IP>:1900       *:*
  UDP    127.0.0.1:123          *:*
  UDP    127.0.0.1:1037         *:*
  UDP    127.0.0.1:1204         *:*
  UDP    127.0.0.1:1900         *:*
  UDP    127.0.0.1:3629         *:*


There we go.
That's my one.
XP SP2.
Yours only has the UDP lines?
Image
Quantum Particle
level3
level3
Posts: 260
Joined: Sat Sep 04, 2004 11:17 am

Postby Quantum Particle » Sat Jul 09, 2005 8:08 pm

No, the port i'm looking for is a UDP, there are TCP ones; should I post a transcript?
#Particle man

Particle man

Does whatever a particle can#

My profile!

My forums!
Deepsmeg
level5
level5
Posts: 6508
Joined: Thu Mar 21, 2002 1:26 pm
Location: Register 2102
Contact:

Postby Deepsmeg » Sat Jul 09, 2005 8:15 pm

Up to you.
I'm too tired to do thinking at the moment.
Image
User avatar
Mr. Roboto
level4
level4
Posts: 826
Joined: Sat Jan 08, 2005 6:05 pm
Location: Baltimore.md.us

Postby Mr. Roboto » Sun Jul 10, 2005 4:32 am

Sounds like what's needed is a good firewall, one that actually logs incoming/outgoing traffic.

Sygate has a good personal firewall that does that, plus it's free!

It may not tell you what files it's trying to access, but at least you can find out who is trying to acess them.
Stewsburntmonkey
level5
level5
Posts: 11553
Joined: Wed Jul 10, 2002 7:44 pm
Location: Nashville, TN
Contact:

Postby Stewsburntmonkey » Sun Jul 10, 2005 4:44 am

First off it would help to provide actual port number and any other information you have about it.

When something connects to the computer it is not connecting to a file or folder, but to a program. Each port has a type of program "listening" on it which handles any connections on that port. Different ports use different types of connection protocols which are used for different things, FTP, TCP, SSH, TelNet, etc. The port number will generally allow you to figure out which program is using that port. :)
Blasted heath
level5
level5
Posts: 1292
Joined: Sat Jul 12, 2003 2:29 pm
Location: Scotland ©
Contact:

Postby Blasted heath » Sun Jul 10, 2005 5:16 am

Installing a firewall which blocks incoming/outgoing traffic until you say otherwise may be of use, that way you can see what is trying to connect where, and what is trying to receive the connection.
Blasted heath
Quantum Particle
level3
level3
Posts: 260
Joined: Sat Sep 04, 2004 11:17 am

Postby Quantum Particle » Sun Jul 10, 2005 10:20 am

Ah; I tried that, and found that it is a game I have, why it is accessing itself I'm not sure.
PS port kept changing
#Particle man

Particle man

Does whatever a particle can#

My profile!

My forums!

Return to “General”

Who is online

Users browsing this forum: No registered users and 1 guest