Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations John Tel on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Netstat interpretation

Status
Not open for further replies.

CondorMan

Technical User
Jan 23, 2005
211
GB
Hi everyone

I have XP Pro SP2, along with ADSL>Router>wireless or wired connection. I thought that I had disabled NetBIOS over TCP/IP for the ethernet and wireless connections. I ran netstat -an and was surprised to see port 445 mentioned. It was under Local Address and it reads "0.0.0.0:445 Listening" the corresponding Foreign Address is "0.0.0.0:0". Port 445 is not mentioned under Foreign Address. Is there something wrong here? I've tried re-enabling NetBIOS over TCP/IP for both connections, rebooting, disabling both and rebooting but the entry is still there in the Local Address column. Is this *really* disabled. I disabled it by going to TCP/IP for each connection>Properties>Advanced.

I think that Port 445 is also used by Nimda, but my AV is fully up to date and clean.

I'm confused and want my system to be secure.
 
The only way to completely stop all NetBIOS traffic is to install UNIX. Ok, just kidding. If you disable your Server service, and deselect File and Print Sharing in your NIC properties, that should pretty well stop everything.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top