Connections question

Discussion in 'other software & services' started by gerardwil, Mar 27, 2004.

Thread Status:
Not open for further replies.
  1. gerardwil

    gerardwil Registered Member

    Joined:
    Jan 17, 2004
    Posts:
    4,748
    Location:
    The Netherlands
    Hi All,

    Is there anyone who can explain to me what MF Cobol means and what it is doing there?
    Many thanks in advance,

    Gerard

    Date: 27-3-2004 13:05:55
    Computer: GERARD
    User: Gerard Willems

    Connections:
    Remote Computer   Remote IP Addr   Remote Port   Local IP Addr   Local Port   Status   Program
    Gerard   0.0.0.0   14522   0.0.0.0   POP3   listening   AVKPop.exe
    Gerard   0.0.0.0   49381   0.0.0.0   Loc-Srv   listening   svchost.exe
    Gerard   0.0.0.0   28914   0.0.0.0   1025   listening   svchost.exe
    Gerard   0.0.0.0   MF Cobol   0.0.0.0   1026   listening   System
    Gerard   0.0.0.0   61507   0.0.0.0   4077   listening   xcommsvr.exe
    Gerard   0.0.0.0   14520   127.0.0.1   3001   listening   alg.exe
    Gerard   0.0.0.0   39064   127.0.0.1   3002   listening   svchost.exe
    Gerard   0.0.0.0   20550   127.0.0.1   3003   listening   svchost.exe
    Gerard   0.0.0.0   49196   127.0.0.1   31595   listening   Pavproxy.exe
    Gerard   0.0.0.0   49386   127.0.0.1   31596   listening   Pavproxy.exe
    Gerard   0.0.0.0   45118   127.0.0.1   31597   listening   Pavproxy.exe
     
  2. Tassie_Devils

    Tassie_Devils Global Moderator

    Joined:
    May 8, 2002
    Posts:
    2,514
    Location:
    State Queensland, Australia
    Hi Gerard.

    It appears it's some sort of system file and there is quite a few hits when searching for MF COBOL... to do with Linux and Windows. Just what I gleaned from a quick search.

    Here:
    http://www.iri.com/public/solutions/cosort/mfcobol.htm

    Google Search here:
    http://www.google.com/search?q=MF%20Cobol&num=100

    TAS.
     
  3. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    17,878
    Location:
    New England
    Actually, that is just the text name (commonly used name or official port assignment) for a port number, it doesn't necessarily mean you are accessing or using Micro Focus Cobol.

    The column that name is in is "remote port". As it happens at the moment, there are no assigned or common names for any other remote ports in your listing, but in the local port column you'll notice two ports are named there, as well.

    If you call up a CMD window (Start > Run > CMD) and enter netstat -ano in the resulting command window, you'll see all numeric representations of the ports rather than any text representations.

    Now exactly what it is, I'm not sure. The fact that the remote system is 0.0.0.0 (which is also your system) makes it seem like some service you are running on your system. From your sig and the list of ports above, it looks like you have a number of different tools as well as default services running on your system, (for example, that POP proxy for email virus scanning).

    Whatever it is, it's local to your system since both ends of the connection are your system (0.0.0.0).
     
  4. gerardwil

    gerardwil Registered Member

    Joined:
    Jan 17, 2004
    Posts:
    4,748
    Location:
    The Netherlands
    Hi guys,

    Thanks for answering. Below is the monitoring right now. The MF Cobol is gone, instead there is a normal port number. It should have been an incident.

    Greetings,

    Gerard

    Date: 27-3-2004 22:08:08
    Computer: GERARD
    User: Gerard Willems

    Connections:
    Remote Computer   Remote IP Addr   Remote Port   Local IP Addr   Local Port   Status   Program
    Gerard   0.0.0.0   28884   0.0.0.0   POP3   listening   AVKPop.exe
    Gerard   0.0.0.0   24677   0.0.0.0   Loc-Srv   listening   svchost.exe
    Gerard   0.0.0.0   18565   0.0.0.0   1025   listening   svchost.exe
    Gerard   0.0.0.0   14508   0.0.0.0   1026   listening   System
    Gerard   0.0.0.0   57444   0.0.0.0   4077   listening   xcommsvr.exe
    Gerard   0.0.0.0   49235   127.0.0.1   3001   listening   alg.exe
    Gerard   0.0.0.0   63507   127.0.0.1   3002   listening   svchost.exe
    Gerard   0.0.0.0   2240   127.0.0.1   3003   listening   svchost.exe
    Gerard   0.0.0.0   45150   127.0.0.1   31595   listening   Pavproxy.exe
    Gerard   0.0.0.0   45118   127.0.0.1   31596   listening   Pavproxy.exe
    Gerard   0.0.0.0   45262   127.0.0.1   31597   listening   Pavproxy.exe
     
Loading...
Thread Status:
Not open for further replies.