Security Incidents mailing list archives
System Idle Process making TCP connections
From: John Davison <johndavison () compasseng com>
Date: Fri, 7 Jul 2006 16:21:50 -0400
I've never seen anything like this before. After experiencing some really strange behavior from various applications and lot of looking around, I downloaded TCPView from System Internals and found that the System Idle Process (id 0) is making connections to itself, from source port 6160 to a series of local ports and keeps incrementing. Has anyone seen anything like this before? Here's a TCPView dump. lsass.exe:676 TCP 0.0.0.0:1043 0.0.0.0:0 LISTENING RSLINX.EXE:516 TCP 0.0.0.0:2222 0.0.0.0:0 LISTENING RSLINX.EXE:516 TCP 0.0.0.0:44818 0.0.0.0:0 LISTENING spoolsv.exe:1272 TCP 0.0.0.0:6160 0.0.0.0:0 LISTENING svchost.exe:440 TCP 0.0.0.0:3389 0.0.0.0:0 LISTENING svchost.exe:960 TCP 0.0.0.0:135 0.0.0.0:0 LISTENING System:4 TCP 0.0.0.0:445 0.0.0.0:0 LISTENING System:4 TCP 10.1.1.150:139 0.0.0.0:0 LISTENING System:4 TCP 10.1.1.150:4017 10.1.1.1:139 ESTABLISHED [System Process]:0 TCP 10.1.1.150:3475 10.1.1.12:445 TIME_WAIT RSLINX.EXE:516 TCP 10.1.1.150:1071 10.1.1.99:2222 ESTABLISHED svchost.exe:440 TCP 10.1.1.150:3389 10.1.1.121:1989 ESTABLISHED svchost.exe:440 TCP 10.1.1.150:3389 10.1.1.134:45843 ESTABLISHED [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3421 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3422 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3423 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3424 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3425 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3426 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3427 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3428 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3429 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3430 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3431 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3432 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3433 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3434 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3435 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3436 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3437 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3438 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3439 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3440 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3441 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3442 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3443 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3444 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3445 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3446 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3447 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3448 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3449 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3450 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3451 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3452 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3453 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3454 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3455 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3456 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3457 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3458 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3459 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3460 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3461 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3462 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3463 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3464 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3465 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3466 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3467 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3468 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3469 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3470 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3471 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3472 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3473 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3474 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3477 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3478 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3479 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3480 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3481 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3482 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3483 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3484 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3485 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3486 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3487 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3488 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3489 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3490 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3491 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3492 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3493 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3494 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3495 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3496 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3497 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3498 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3499 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3500 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3501 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3502 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3503 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3504 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3505 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3506 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3507 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3508 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3509 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3510 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3511 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3512 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3513 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3514 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3515 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3516 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3517 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3518 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3519 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3520 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3521 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3522 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3523 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3525 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3526 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3527 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3528 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3529 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3530 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3531 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3532 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3533 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3534 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3535 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3536 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3537 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3538 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3539 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3540 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3541 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3542 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3543 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3544 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3545 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3546 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3547 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3548 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3549 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3550 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3551 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3552 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3553 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3554 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3555 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3556 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3557 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3558 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3559 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3560 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3561 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3562 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3563 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3564 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3565 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3566 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3567 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3568 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3569 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3570 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3571 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3572 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3573 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3574 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3575 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3576 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3577 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3578 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3579 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3580 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3581 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3582 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3583 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3584 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3585 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3586 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3587 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3588 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3589 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3590 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3591 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3592 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3593 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3594 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3595 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3596 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3597 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3598 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3599 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3600 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3601 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3602 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3603 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3604 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3605 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3606 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3607 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3608 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3609 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3610 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3611 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3612 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3613 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3614 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3615 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3616 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3617 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3618 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3619 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3620 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3621 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3622 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3623 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3624 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3625 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3626 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3627 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3628 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3629 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3630 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3631 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3632 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3633 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3634 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3635 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3636 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3637 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3638 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3639 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3640 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3641 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3642 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3643 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3644 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3645 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3646 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3647 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3648 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3649 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3650 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3651 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3652 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3653 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3654 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3655 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3656 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3657 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3658 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3659 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3660 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3661 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3662 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3663 TIME_WAIT [System Process]:0 TCP 10.1.1.150:6160 10.1.1.150:3664 TIME_WAIT [System Process]:0 TCP 10.1.1.150:3522 10.1.1.150:6160 TIME_WAIT [System Process]:0 TCP 10.1.1.150:3524 10.1.1.150:6160 TIME_WAIT spoolsv.exe:1272 TCP 10.1.1.150:2702 10.1.1.199:9100 ESTABLISHED Syslogd_Manager.exe:2992 TCP 127.0.0.1:1126 127.0.0.1:3300 CLOSE_WAIT bartend.exe:996 UDP 0.0.0.0:4495 *:* IEXPLORE.EXE:3704 UDP 127.0.0.1:2804 *:* lsass.exe:676 UDP 0.0.0.0:500 *:* lsass.exe:676 UDP 0.0.0.0:4500 *:* lsass.exe:676 UDP 127.0.0.1:1027 *:* spoolsv.exe:1272 UDP 0.0.0.0:2683 *:* spoolsv.exe:1272 UDP 127.0.0.1:2720 *:* svchost.exe:1052 UDP 0.0.0.0:1026 *:* svchost.exe:1052 UDP 0.0.0.0:1025 *:* svchost.exe:1136 UDP 10.1.1.150:123 *:* svchost.exe:1136 UDP 127.0.0.1:123 *:* System:4 UDP 0.0.0.0:445 *:* System:4 UDP 10.1.1.150:137 *:* System:4 UDP 10.1.1.150:138 *:* winlogon.exe:1788 UDP 127.0.0.1:1113 *:* winlogon.exe:620 UDP 127.0.0.1:1069 *:* -- --- John Davison Compass Engineering Group email : johndavison () compasseng com -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.2.2 (GNU/Linux) mQGiBEShREkRBAC3apDBDVdXXUqWIhOEtqV5ziZ1POKdHJ0pkHNPFTUi+KCWzmVy qtszWSf0lFit5GyuQk0LhnU+L1nvwu7/sqCnuvK/uHDScgW38FjuPJ2LhLshz2Qw W89lzhJd55PrP4+baVqUeMxhBJPCGTi9a0vx4VZVXFiP+opG1TgFaRsvbwCgu9iO IfdpSLsFMc4g7/WOdeid9wcD/2na7++Gu2cWn97FQHTKZ7aV3cRYV3Bz+h0ywbWG 8bO5VIT28+u0cNJ4BJro2NJT7xK1S03eHKi4C44L00hYQ3XA5lDfOeI6RAJyntyP kpS4UYa2PrwsdXE1tH7FWL1RxI9N/4lf7xVNd37Gnphccoucb/LYQw3g2cgaFM4R j0+0A/9s2SsLTr+DZmnCTpmbRy84QLTp9LHEwByCyH/olUO2StljS6nT1iKuNVTT wBBftgOx03qk7CT70mq6R2VPriUpUGVweLTTuNF+wdWisgZqNbEeB6JnfbaciuEZ JB01vp/srsclsr5XETLN+kSC+dnEBfkgRUWHGU8d2m9BaeKxd7QpSm9obiBEYXZp c29uIDxqb2huZGF2aXNvbkBjb21wYXNzZW5nLmNvbT6IYAQTEQIAIAUCRKFESQIb AwYLCQgHAwIEFQIIAwQWAgMBAh4BAheAAAoJEIe4N0PB1ntvmkwAoJIhqQ+xc9LX efi1zRngGtvIj/nVAKCLhdSCNUGg0LdAwbelk0G5PhuRF7kCDQREoUSOEAgAoxat qsUtLv27ePWClRAOJ6ZgphMSFNqsxo39+pWziQCe4jytVOUw2Gs9MeFB3N1OAkXG Maoxv2Z105GNrtmiYSVgsjeVBvs077CITjGfo0PNP56j+26nV+GWGQUChWdxvqO9 QmhZ2SrXfD3iFVG9BBgS1iaqu62OKUDLwaqE8+r0mToaeHipo7BPP6ew+UcHdGU6 OFlEKHwGQ8vTLsqSLuM4WDd9NZ6fW/z9lHcmrnYTMVpHwq61t93MZO4wcvKac9QA KiiZkxs16lGSh/i31Qza8qUUtY0hD1YpPuBuwwysq/7JwS4WZJ7hOLHk2ZVvmiKH B6ivctsJ21kFgvk5mwADBgf/TXdcQfAuN/LzJ0aph2hPeAkQrWaVRZRpd2TbbSaY c+VuprHAALdZPdbPd/ZYDAANyCVvdEOfRsL/7xzNmEgQx/2EUfErE4acYaWo5kd9 0VOpno6d3OlJL2RlNZ6iufs2kn8ZS6mgXPMfHKN85v2OZJ34Gf9VB7xtN6+F5SQK 0B7Wb47wJdApUotqCTg5WXEJ0juAw1fGXUy9u2WqfSq4si5OtvTay/EMFJPsZ49f 0JfdzgJbvmYYuH0ghLeEvIFnEZcpfbVtKUtNAhHLW6Cze27xY4wx+9uSN22q41kh RdGr91g64ST7C/mpXiX80rYRo3Vslgnqpq1fJ2XvpSRYgohJBBgRAgAJBQJEoUSO AhsMAAoJEIe4N0PB1ntvLtUAmwRNrDu1JaYpnfudHCJ6xmO1xhy7AKCq7zA1gmtc oDiShAq5QiKJP7VQSg== =usOt -----END PGP PUBLIC KEY BLOCK-----
Attachment:
_bin
Description:
Current thread:
- System Idle Process making TCP connections John Davison (Jul 07)
- Re: System Idle Process making TCP connections lee . e . rian (Jul 07)
- Re: System Idle Process making TCP connections John Davison (Jul 07)
- Re: System Idle Process making TCP connections lee . e . rian (Jul 07)