Question

Can someone please give me info on what this do and why ?

Active Connections Proto Local Address TCP 0.0.0.0:135 TCE 0.0.0.0:445 Foreign Address ITSENG236PC24.engr.aamu.edu:0 LISTENING TCP 0.0.0.0:1025 TCP 0.0.0.0:1026 TCP 0.0.0.0:1027 TCP 0.0.0.0:1028 TCP 0.0.0.0:1045 TCP 0.0.0.0:1053 TCe 10.100.205.64:139 TCP 10.100.205.64:19565 a23-196-123-131.deploy.static.akamaitechnologies.com:http CLOSE TCP 10.100.205.64:19566 a23-218-51-148.deploy.atatic.akamaitechnologies.com:http cLOSE TCP 10.100.205-64:19567a23-196-123-131.deploy.static,akamaitechnologies.com:http CLOSE TCP 10.100.205.64:19569 a23-218-51-149.deploy.static.akamaitechnologies.com:http cLOSE W TCP 10.100.205.64:19571 ITSENG2 36 PC24.engr.aamu.fdu : O ITSENG236PC24.engr.aam.ldu : 0 ITSENG236PC24.engr.aamu.edu:0 ITSENG236PC24.engr.aamu.edu:0 ITSENG236PC24.engr,aamu.edu:0 ITSENG2 3 6 PC24.engr . aamu .edu : O ITSENG236PC24.engr.aamu.edu:0 LISTENİNG LISTENING LISTENING LISTENING LISTENING LISTENİNG LISTENING o 23-196-57-119.deploy.atatic.akamaitechnologies.com:http CLOSE TCP 10.100.205.64:19573 129.66.96.16ihttp CLOSE WAIT TCP 10.100.205.64:19576 a23-33-60-244 тер 10.100.205.64:19577 TCR ::1:135 23-33-60-244.deploy.atatie.akamaitechnologies.com:https CLOSE A a23-33-60-244.deploy.atatic.akamaitechnologies.comihteps CLOSE WA ITSENG236PC24.engr . aasu.edu :0 LİSTENING ITSENG236PC24.engr.aamu.edu:o LISTENING ITSENG2 36PC24.engr . aamu , edu :0 LISTE TNG ITSENG236PC24.engr.aamu.edu:o LISTENING TCP ::1:1025 ::1:1026 TCP 【.】 : 1027 TCP ::1:10293 ICR (s:1:1045 TCP [1:2053 UDP 0.0.0.0:123 SENG236PC24.engr.aamu.edu:0 LISTENING ITSENG236PC24.engr.aamu.edu:0 LISTENINO TSEN3236PC24.engz.aamu.edu:o LISTENING ITSEG236PC24.engr.amu.edu:O LISZENING VOR o.o.o.o:61350 VDR UDP 10.100.205.643 10.100.205 :137 UDP 27 0.0.1:1900 o 127.0.0.1:50443 D 127.0.0.1:5349 127.0.0 1154216 pe here to search

Answer 1

As per the information provided, it is an OUTPUT trace for netstat command used on windows command prompt along with various inbuilt options. i ran the netstat command on my windows command prompt and a attached the output screenshot for the same. The command i used at command prompt is :

netstat -af

As shown in following OUTPUT TRACE

• Netstat command is used to about the socket applications that are running on along with respected assigned ports.
• there are many options we can use anlong with netstat command which can be seen by using command netstat -? at command prompt as shown in follwoing image.

• Now lets understand the stastics provided by the use of netstat command.
• Proto : it shows the name of protocol beinng used. here portocols used are TCP and UDP (according to image provided in question)
• Local Address : it shows the IP address of the local computer along with respective port number being used.
• Foreign Address : it shows the name of the local computer that corresponds to the IP address of remote computer along wiht socket connection (i.e. to which socket is connected)
• State : it shows the state of TCP connection. Following are the possible states of TCP connections : CLOSE_WAIT, CLOSED, ESTABLISHED, SYN_RECEIVED, SYN_SEND etc
• LISTENING state indicates that one computer waits for another computer to connect to it.
• The follwing figure shows the LISTENING state of TCP connection with local ip address 0.0.0.0 but different port numbers like 135, 445, 1025, 1026, 1027, 1028, 1045, 1053.

• In the above figure 10.100.205.64 is an ip address local computer which is in TCP LISTENING state along with port number 1053 being used. Here, the remote computer name is ITSENG236PC24.engr.aamu.edu along with protocol http
• CLOSE_WAIT indicates that your application is still running and didn't closed the socket.
• The follwing figure shows the CLOSE_WAIT state of TCP connection with local ip address 10.100.205.64 but different port numbers like 19565, 19566, 19567, 19568, 19571, 19573, 19576 and 19577.

• Following figure shows the LISTENING state of TCP connection along with some (::) symbols at Local address.
• (::) symbol represents all zero local ip address i.e. (0.0.0.0) or an unknown address or ipv6 address.

• Following figure shows the use of UDP protocol and colon symbol in the field of foreign address represents the program is listening to incoming connections.