Whats using my Network? - Tilted Forum Project Discussion Community

Mister B · 01-27-2004, 05:50 PM

Is there any way to determine what is using my internet connection? I can see that there are incoming and outgoing bits, but don't have any programs open that use the internet. I'm using winXP BTW.

I also just ran anti virus and uninstalled a trojan dialer. Don't know if that matters or not.

pythonite · 01-27-2004, 06:21 PM

You can see what ports are open on your computer... run the "netstat" command in the command prompt.

As for complete network analysis, I am unaware of any programs that do this.

pythonite · 01-27-2004, 06:22 PM

If you are concerned about spyware, run a program called spybot: http://security.kolla.de/

Removes most spyware programs and also blocks vulnerabilities in IE... I give it 3 thumbs up!

Redjake · 01-27-2004, 06:47 PM

also get Hijack This.

Mister B · 01-27-2004, 07:21 PM

I've ran spybot, everything is good.

I did however turn on the xp firewall and I am no longer sending any packets, only recieving. It's really annoying not knowing what is causing it. I know if I install and run zonealarm it will ask me if so-and-so is allowed to access my computer.

Is that the only way to find out whats trying to get in?

phukraut · 01-28-2004, 04:00 PM

search for a program called tcpview, it's a nice gui version of netstat.

Jephree · 01-28-2004, 05:28 PM

Good info in this post. I could use it too.

Fallon · 01-29-2004, 08:53 AM

If you REALLY wanna know, you can get a packet sniifer such as Ethereal to look at the traffic on your computer. Depending on the traffic, you might just be updating the network about certain things and so they know you are there.
Also, what is your internet connection, dial-up or high-speed(DSL or Cable)?
If you are on a dial-up, I occassionally have my internet traffic go over my lan at home so that might be another possibility.
To get another look at what ports are open on your computer, dl a program called WinScan. Get your ip, and in the field Address put in your ip and for the subnet put 255.255.255.255
This will get a list of the ports open on your computer, and it might be able to give you what service is being run on that port.

Sorry for all the info, but this is what I and studying in school

I personally don't believe in the get a firewall to block all the bad ports because there are ways around that

If you need anymore help you can PM me or post another message.

tritium · 01-29-2004, 08:26 PM

LOL. All that and it could just be his Windows Update program downloading updates quietly in the background...

I always check that first.

Fallon · 01-30-2004, 05:11 AM

Or it could be that...
I guess I like hurtin myself by goin the long way

tritium · 01-30-2004, 08:33 AM

Quote:

Originally posted by Fallon
Or it could be that...
I guess I like hurtin myself by goin the long way

Me too. That's experience talking though ... can't tell you how *long* it took me to think of that last time around. MSUpdate packets look screwy and at the time, the destination IP wasn't resolving correctly so it looked REALLY screwy.

Jephree · 01-31-2004, 10:24 AM

won't windows update usually notify you (if firewall setup) when it's updating even if your settings allow it to update automatically?

tritium · 01-31-2004, 12:31 PM

Nope. If its set to download, it'll just do it. Your firewall might not even resolve the IP into a URL that could be recognizeable.

Jephree · 01-31-2004, 03:51 PM

Quote:

Originally posted by pythonite
You can see what ports are open on your computer... run the "netstat" command in the command prompt.

As for complete network analysis, I am unaware of any programs that do this.

what should be the results when running netstat?

01-27-2004, 05:50 PM	#1 (permalink)
Mister B Insane Location: Burbs of St.Lou	Whats using my Network? Is there any way to determine what is using my internet connection? I can see that there are incoming and outgoing bits, but don't have any programs open that use the internet. I'm using winXP BTW. I also just ran anti virus and uninstalled a trojan dialer. Don't know if that matters or not. __________________ "Little racoons and old possums 'n' stuff all live up in here. They've got to have a little place to sit." Bob Ross.

01-27-2004, 06:47 PM	#4 (permalink)
Redjake I'm a family man - I run a family business. Location: Wilson, NC	also get Hijack This. __________________ Off the record, on the q.t., and very hush-hush.

01-27-2004, 07:21 PM	#5 (permalink)
Mister B Insane Location: Burbs of St.Lou	I've ran spybot, everything is good. I did however turn on the xp firewall and I am no longer sending any packets, only recieving. It's really annoying not knowing what is causing it. I know if I install and run zonealarm it will ask me if so-and-so is allowed to access my computer. Is that the only way to find out whats trying to get in? __________________ "Little racoons and old possums 'n' stuff all live up in here. They've got to have a little place to sit." Bob Ross.

01-28-2004, 05:28 PM	#7 (permalink)
Jephree AKA: Boner Stabone Location: The one and only, SoCaLi	Good info in this post. I could use it too. __________________ When's the next good swell in SoCal?

01-29-2004, 08:26 PM	#9 (permalink)
tritium Professor of Drinkology	LOL. All that and it could just be his Windows Update program downloading updates quietly in the background... I always check that first. __________________ Blah.

01-27-2004, 06:21 PM	#2 (permalink)
pythonite Upright Location: Chico, CA	You can see what ports are open on your computer... run the "netstat" command in the command prompt. As for complete network analysis, I am unaware of any programs that do this.

01-27-2004, 06:22 PM	#3 (permalink)
pythonite Upright Location: Chico, CA	If you are concerned about spyware, run a program called spybot: http://security.kolla.de/ Removes most spyware programs and also blocks vulnerabilities in IE... I give it 3 thumbs up!

01-28-2004, 04:00 PM	#6 (permalink)
phukraut Addict	search for a program called tcpview, it's a nice gui version of netstat.

01-29-2004, 08:53 AM	#8 (permalink)
Fallon Junkie Location: RI	If you REALLY wanna know, you can get a packet sniifer such as Ethereal to look at the traffic on your computer. Depending on the traffic, you might just be updating the network about certain things and so they know you are there. Also, what is your internet connection, dial-up or high-speed(DSL or Cable)? If you are on a dial-up, I occassionally have my internet traffic go over my lan at home so that might be another possibility. To get another look at what ports are open on your computer, dl a program called WinScan. Get your ip, and in the field Address put in your ip and for the subnet put 255.255.255.255 This will get a list of the ports open on your computer, and it might be able to give you what service is being run on that port. Sorry for all the info, but this is what I and studying in school I personally don't believe in the get a firewall to block all the bad ports because there are ways around that If you need anymore help you can PM me or post another message.

01-30-2004, 05:11 AM	#10 (permalink)
Fallon Junkie Location: RI	Or it could be that... I guess I like hurtin myself by goin the long way

01-31-2004, 10:24 AM	#12 (permalink)
Jephree AKA: Boner Stabone Location: The one and only, SoCaLi	won't windows update usually notify you (if firewall setup) when it's updating even if your settings allow it to update automatically? __________________ When's the next good swell in SoCal?

01-31-2004, 12:31 PM	#13 (permalink)
tritium Professor of Drinkology	Nope. If its set to download, it'll just do it. Your firewall might not even resolve the IP into a URL that could be recognizeable. __________________ Blah.