Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Why am I getting all these TCP connections from places I don't know.

Posted on 2014-02-28
12
385 Views
Last Modified: 2014-03-11
My computer is running slow and I think it is because of TCP connections coming in to my computer.

See image below.  What can I do to stop this kind of stuff?

TCP Port Connections reported by "netstat -no"
Thanks for your help.
0
Comment
Question by:LessonsLearned
  • 4
  • 3
  • 2
  • +3
12 Comments
 
LVL 83

Assisted Solution

by:Dave Baldwin
Dave Baldwin earned 100 total points
ID: 39896544
Those are IP addresses that you are connecting to with either your web browser or maybe some media program.  What programs did you have open when you did this scan?

74.125.0.0 - 74.125.255.255 is Google.
23.72.0.0 - 23.79.255.255 is the AKAMAI content delivery network.
207.200.0.0 - 207.200.63.255 is OnRamp but I don't know what they do.
66.63.128.0 - 66.63.128.255 is Nethere and I don't know what they do either.

You can look up all the others too.  There is nothing wrong with having all those connections.  They can simply be a result of using your web browser.
0
 
LVL 37

Assisted Solution

by:bbao
bbao earned 275 total points
ID: 39896546
Download and run TCPVIEW from Microsoft to check which program or process is causing most connections.

http://technet.microsoft.com/en-us/sysinternals/bb897437.aspx
0
 
LVL 93

Expert Comment

by:John Hurst
ID: 39896548
Some of the IP addresses are Onramp (Your ISP maybe) and Akamai (content supplier). It looks (in a brief look) like stuff you asked for.

Do you keep IE open with lots of open tabs?
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 
LVL 7

Expert Comment

by:Sivaraj E
ID: 39896715
You can install WireShark a free open source network traffic and port monitoring tool to analyze, Its a real time analyzer.

http://www.wireshark.org/download.html

Regards, Shiva
0
 
LVL 37

Accepted Solution

by:
bbao earned 275 total points
ID: 39896830
even if you use NETSTAT only, you may use -o option to display the owning process ID associated with each connection, therefore you can trace back to the process name per ID using Windows Task Manager.
0
 
LVL 62

Expert Comment

by:gheist
ID: 39897860
Your netstat looks like you use IE to browse the web... Problem is somewhere else.
0
 

Author Comment

by:LessonsLearned
ID: 39900594
Oh, okay.  So this is normal.  I do use IE and Firefox to browse the web, but I close them when I am finished.   Correct me if I am wrong, but when I close the browsers, shouldn't the tcp connections close as well?
0
 
LVL 62

Expert Comment

by:gheist
ID: 39900652
TCP stack is expected to keep lingering (kind of not completely closed) connections open for a while after protocol closed locally
0
 
LVL 37

Expert Comment

by:bbao
ID: 39900676
> when I close the browsers, shouldn't the tcp connections close as well?

basically, YES.

technically, you can't see the connections disappear instantly as it may take a while waiting for timeout. Eventually, all connections established by IE will be closed once IE is terminated.
0
 
LVL 62

Assisted Solution

by:gheist
gheist earned 125 total points
ID: 39901215
No, time_wait connections wait for predefined time so other end has chance to close correctly. They are no more sockets held by a process.
0
 

Author Closing Comment

by:LessonsLearned
ID: 39921092
Thank you very much.  I now have a better understanding of how this works.
0
 
LVL 37

Expert Comment

by:bbao
ID: 39922338
> No, time_wait connections wait for
predefined time so other end has
chance to close correctly. They are no
more sockets held by a process.

thanks for correcting me.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
How VPC help preventing STP Loops 4 128
managing a small network 6 97
Fiber optic multimode cable issue 6 52
Why does my public IP keep changing? 6 79
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

789 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question