Overnight Database updates, found myself looking at the business end of a taser! Water Cooler.

We made the necessary changes in the ASA firewall and now the logs seems to be much more quieter and nicer. I enabled the firewall and also enabled the firewall logging, sure enough same entries showed up but the entry also showed the port number 2055.Īfter that we researched the port and figured out why it was used, no one noticed this was going on for the past 3 years (I started a year ago 1st IT job).

TRy this link - http:/ / / 2007/ 03/ tracking-down-random-icmp-in-windows.htmlĪfter reading up on this i researched ICMP bit more and decided to enable windows firewall, (did i mention its a Win XP box). I researched and downloaded a few different programs for ICMP traffic tracers and still no luck. Well well well.so the story goes like this :P How did you find it? That's the whole crème de la thread right there! ) We made some changes in our firewall and now pings seems to have stopped. It turns out netflow was generating pings on port 2055. That didn't show the information i am looking for either Dave Rossi wrote: If omitted, netstat will print the current Interval Redisplays selected statistics, pausing interval secondsīetween each display. t Displays the current connection offload state. The -p option may be used to specify a subset of the default. Shown for IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP, and UDPv6 IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP, or UDPv6. Option to display per-protocol statistics, proto may be any of: May be any of: TCP, UDP, TCPv6, or UDPv6. p proto Shows connections for the protocol specified by proto proto

o Displays the owning process ID associated with each connection. n Displays addresses and port numbers in numerical form. f Displays Fully Qualified Domain Names (FQDN) for foreign Note that this optionĬan be time-consuming and will fail unless you have sufficient Name is in at the bottom, on top is the component it called,Īnd so forth until TCP/IP was reached. Sequence of components involved in creating the connection Multiple independent components, and in these cases the In some cases well-known executables host

b Displays the executable involved in creating each connection or a Displays all connections and listening ports. Look at the options for NETSTAT, you can find the executable associated with a protocol with switches.

Tcpview icmp