what is this :epmap thing in netstat?

[swashbuckler]

i go into netstat
whenever my firewall is off

and i see

TCP mycomputer:epmap dsl-sj-66-219-84-210.broadviewnet.net:3965 ESTABLISHED

TCP mycomputer:epmap d66-222-136-222.abhsia.hsia.net:2790 ESTABLISHED


other times i see
the same thing, only epmap says microsoft-ds
?? what is this
should i be worried?

thanks!!

 

[FaiTHLeSS]

epmap is port 135 and you dont want this open to the outside world. its used for rpc. yes i would be a bit worried if people are conencted to it. Also make sure you have all the windows updates installed.

 

[bcastner]

epmap stands for End Point Mapper, and represents that your computer has established a listening port for another process.

Some of this is benign. See the following to determine who and what is using the RPC service:

http://www.petri.co.il/quickly_find_local_open_ports.htm

1. Make sure you have a firewall. The native XP ICF firewall is sufficient.

2. Make sure you have all the latest MS security patches installed. Visit the MS Windows Update site to check your system.