My router shows these 4 connections in the Internet Sessions page. If I run CurrPorts or Netstat -an they show no connections and absolutely nothing using those ports. I Checked every program running with Sysinternals Process Explorer and there are no foreign programs or files running and none with a established connection. How can't I find out whats connecting to these IP's?
192.168.0.117:49188 49188 65.54.87.11:80 TCP EST Out 192.168.0.117:49187 49187 65.54.87.90:80 TCP EST Out 192.168.0.117:49186 49186 65.54.87.185:80 TCP EST Out 192.168.0.117:49185 49185 65.54.87.90:80 TCP EST Out
quote: [Querying whois.arin.net] [whois.arin.net] # # Query terms are ambiguous. The query is assumed to be: # "n 65.54.87.11" # # Use "?" to get help. #
OrgName: Microsoft Corp OrgId: MSFT Address: One Microsoft Way City: Redmond StateProv: WA PostalCode: 98052 Country: US RegDate: 1998-07-10 Updated: 2011-04-26 Ref: »whois.arin.net/rest/org/MSFT
reply to Sindows 7 The most likely explanation is the program that established the connection has closed and is no longer using the port and the router is either not stateful or the proper TCP closing handshake did not occur so the router does not know the connection is no longer established.
This post may provide some links and background info to look at for a greater understanding.
·
·
