Is it normal ? 1

[Xtian]

After rebooting my PC (WIN 98SE on which I have Norton Antivirus uptodate, with a CABLE connection to the Internet, and with ZoneAlarm FW), if I run netstat -a command I get this result :

netstat -a

Active Connections

Proto Local Address Foreign Address State
TCP chris:3731 CHRIS:0 LISTENING
TCP chris:1025 CHRIS:0 LISTENING
TCP chris:137 CHRIS:0 LISTENING
TCP chris:138 CHRIS:0 LISTENING
TCP chris:nbsession CHRIS:0 LISTENING
UDP chris:3731 *:*
UDP chris:1025 *:*
UDP chris:nbname *:*
UDP chris:nbdatagram *:*

Is it normal ?

Why do I see these ports 137, 138 (both for NetBios), and 3731 and 1025 in a LISTENING state ? How could I remove this if necessary ?

Thanks for any advice,
Xtian,

 

[paulwood]

As I understand it, the fact that the ports are reported as listening is down to the system configuration, and what services or programs you have running. If you don't need NetBios enabled over tcp/ip then unbind it in the TCP/IP Network Properties relating to your cable modem. Just having something listening doesn't mean the computer is compromised, it depends on the permissions you have allowed each program in Zone Alarm. If you are concerned, go to Sheilds Up section at

http://www.grc.com

and run the Probe my Ports test. With ZA it should come out as 'Stealth' on each port if set up properly.