Jump to content

What are these connections svchost.exe makes?


Pfipps

Recommended Posts

svchost.exe:888 TCP *.:1048 64.4.21.61:https ESTABLISHED

svchost.exe:888 TCP *.:1047 64.4.21.61:http ESTABLISHED

svchost.exe:888 TCP *.:1046 64.212.100.110:http ESTABLISHED

 

They occur when I just enable my network card (I never have the connection enabled if I don't need it).

 

I got these using TCPView from sysinternals.

 

I see no signs of any breach of my security, and I use NOD32 with Zone Alarm Pro.

Link to comment
Share on other sites

svchost.exe:888 TCP *.:1048 64.4.21.61:https ESTABLISHED

svchost.exe:888 TCP *.:1047 64.4.21.61:http ESTABLISHED

svchost.exe:888 TCP *.:1046 64.212.100.110:http ESTABLISHED

 

port 61 is IMAP, EMAIL, https is your SSL, 110 is POP3, svchost.exe, is your system, 888 is the process ID. 1048, 47, 46 are you local outbound ports, which are random.

 

Here is a listing of ports

 

http://en.wikipedia.org/wiki/List_of_tcp_ports

http://en.wikipedia.org/wiki/List_of_udp_ports

Link to comment
Share on other sites

No security breach.

 

If you turn off DNS client I think you'll find that there won't be any svchost connections.Or so I found when I used ZAP which was a fair while ago.

 

Some say that by turning off dns client it slows your browsing but I leave it disabled and have no slowdowns with FF.

Link to comment
Share on other sites

DNS Client is a total memory wasting useless service :rolleyes:

"Education is what remains after one has forgotten everything he learned in school." - Albert Einstein

IE7Pro user

Link to comment
Share on other sites

https means its on port 443.

http means its on port 80.

 

TCP (Transmission Control Protocol) is the protocol.

ESTABLISHED is the state of the TCP connection.

firefoxblue4yw.gif

button_b.png hydrogen2nr.png

80x15_3.png

Link to comment
Share on other sites

I currently use TCPview from Sysinternals.

 

 

Sysinternals tools are very useful but now they are distributed by Microsoft :

MS Technet : Sysinternals Homepage

I hope they will remain freeware.

Link to comment
Share on other sites

  • Moderators

Sysinternals tools are very useful but now they are distributed by Microsoft :

MS Technet : Sysinternals Homepage

I hope they will remain freeware.

 

Currently they're all still free and MS does have a good number of free stuff if you look hard enough on their download website, and of course validate your Windows installation with them in order to download anything.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.