Connections question

[gerardwil]

Hi All,

Is there anyone who can explain to me what MF Cobol means and what it is doing there?
Many thanks in advance,

Gerard

Date: 27-3-2004 13:05:55
Computer: GERARD
User: Gerard Willems

Connections:
Remote Computer***Remote IP Addr***Remote Port***Local IP Addr***Local Port***Status***Program
Gerard***0.0.0.0***14522***0.0.0.0***POP3***listening***AVKPop.exe
Gerard***0.0.0.0***49381***0.0.0.0***Loc-Srv***listening***svchost.exe
Gerard***0.0.0.0***28914***0.0.0.0***1025***listening***svchost.exe
Gerard***0.0.0.0***MF Cobol***0.0.0.0***1026***listening***System
Gerard***0.0.0.0***61507***0.0.0.0***4077***listening***xcommsvr.exe
Gerard***0.0.0.0***14520***127.0.0.1***3001***listening***alg.exe
Gerard***0.0.0.0***39064***127.0.0.1***3002***listening***svchost.exe
Gerard***0.0.0.0***20550***127.0.0.1***3003***listening***svchost.exe
Gerard***0.0.0.0***49196***127.0.0.1***31595***listening***Pavproxy.exe
Gerard***0.0.0.0***49386***127.0.0.1***31596***listening***Pavproxy.exe
Gerard***0.0.0.0***45118***127.0.0.1***31597***listening***Pavproxy.exe

[Tassie_Devils]

Hi Gerard.

It appears it's some sort of system file and there is quite a few hits when searching for MF COBOL... to do with Linux and Windows. Just what I gleaned from a quick search.

-{ Quote: "As the leader in mainframe sort migrations to UNIX and Windows since 1985, The CoSORT Company continues to provide superior support for ported COBOL applications and data. CoSORT interfaces directly to the Micro Focus COBOL sort verb on Workbench v4 for Windows and 4.1 for UNIX. Similar work is underway in the netExpress environment for Windows, and ServerExpress for UNIX. " }-

Here:
http://www.iri.com/public/solutions/cosort/mfcobol.htm

Google Search here:
http://www.google.com/search?q=MF%20Cobol&num=100

TAS.

[LowWaterMark]

Actually, that is just the text name (commonly used name or official port assignment) for a port number, it doesn't necessarily mean you are accessing or using Micro Focus Cobol.

The column that name is in is "remote port". As it happens at the moment, there are no assigned or common names for any other remote ports in your listing, but in the local port column you'll notice two ports are named there, as well.

If you call up a CMD window (Start > Run > CMD) and enter netstat -ano in the resulting command window, you'll see all numeric representations of the ports rather than any text representations.

Now exactly what it is, I'm not sure. The fact that the remote system is 0.0.0.0 (which is also your system) makes it seem like some service you are running on your system. From your sig and the list of ports above, it looks like you have a number of different tools as well as default services running on your system, (for example, that POP proxy for email virus scanning).

Whatever it is, it's local to your system since both ends of the connection are your system (0.0.0.0).

[gerardwil]

Hi guys,

Thanks for answering. Below is the monitoring right now. The MF Cobol is gone, instead there is a normal port number. It should have been an incident.

Greetings,

Gerard

Date: 27-3-2004 22:08:08
Computer: GERARD
User: Gerard Willems

Connections:
Remote Computer***Remote IP Addr***Remote Port***Local IP Addr***Local Port***Status***Program
Gerard***0.0.0.0***28884***0.0.0.0***POP3***listening***AVKPop.exe
Gerard***0.0.0.0***24677***0.0.0.0***Loc-Srv***listening***svchost.exe
Gerard***0.0.0.0***18565***0.0.0.0***1025***listening***svchost.exe
Gerard***0.0.0.0***14508***0.0.0.0***1026***listening***System
Gerard***0.0.0.0***57444***0.0.0.0***4077***listening***xcommsvr.exe
Gerard***0.0.0.0***49235***127.0.0.1***3001***listening***alg.exe
Gerard***0.0.0.0***63507***127.0.0.1***3002***listening***svchost.exe
Gerard***0.0.0.0***2240***127.0.0.1***3003***listening***svchost.exe
Gerard***0.0.0.0***45150***127.0.0.1***31595***listening***Pavproxy.exe
Gerard***0.0.0.0***45118***127.0.0.1***31596***listening***Pavproxy.exe
Gerard***0.0.0.0***45262***127.0.0.1***31597***listening***Pavproxy.exe