Try this: (from XP workstaton)
Open two command prompts.
In one command prompt, type:
ftp 10.255.254.254 (or any non-existant host address you make up)
In the other command prompt, type:
netstat -na | find /i ":21"
TCP 10.0.1.22:4945 10.255.254.254:21 ESTABLISHED
TCP 10.0.1.22:4947 10.255.254.254:21 SYN_SENT
I can understand the SYN_SENT because it is trying to establish a handshake, but why would it show a "ESTABLISHED" connection when the host address is non-existant?
Start Free Trial