UDP Port 1427

Discussion in 'LnS English Forum' started by asyland, Feb 24, 2007.

Thread Status:
Not open for further replies.
  1. asyland

    asyland Registered Member

    Joined:
    Jun 5, 2006
    Posts:
    90
    This is just a small sample of the log I'm getting with LnS. These are logging at several a second. Just what is mmload monitoring tool and why are these coming so fast and furious? The details of my set up are: Netgear router, comcast cable, DNS Service disabled, and under NETbios Settings I have "Disable Netbios over TCP". Not sure if all this is needed, but just in case. Still learning and am clueless about this. Haven't turned up much on Google.
    Sorry, almost forgot to say thanks in advance for any info/help. Don't like to take anything for granted.
    All the best.
     

    Attached Files:

  2. Frederic

    Frederic LnS Developer

    Joined:
    Jan 9, 2003
    Posts:
    4,354
    Location:
    France
    Hi,

    I did a search also but nothing else you have already mentioned.

    The strange thing also is it is coming from many different machines.

    If this port is really used by a monotoring tool, perhaps you got the IP of a server waiting for client sending something on port 1427.
    Or maybe it was simply a P2P server using port 1427.

    Frederic
     
  3. asyland

    asyland Registered Member

    Joined:
    Jun 5, 2006
    Posts:
    90
    Hi Frederic,
    Thanks for the reply. This is what I'm getting from TCP View
    [System Process]:0 TCP helios.hsd1.ca.comcast.net.:4587 dsl212-143-35-100.bb.netvision.net.il:http TIME_WAIT
    [System Process]:0 TCP helios.hsd1.ca.comcast.net.:4624 dsl212-143-35-100.bb.netvision.net.il:http TIME_WAIT
    svchost.exe:1520 UDP helios.hsd1.ca.comcast.net.:ntp *:*
    alg.exe:480 TCP helios:1030 helios:0 LISTENING
    looknstop.exe:412 UDP helios:4700 *:*
    ISRService.exe:1820 TCP helios:48288 helios:0 LISTENING
    svchost.exe:1520 UDP helios:ntp *:*
    firefox.exe:2540 TCP helios.hsd1.ca.comcast.net.:4751 vrp1.rhv.xpc-mii.net:http CLOSE_WAIT
    firefox.exe:2540 TCP helios.hsd1.ca.comcast.net.:4753 mc-in-f147.google.com:http ESTABLISHED
    firefox.exe:2540 TCP helios:4747 localhost:4748 ESTABLISHED
    firefox.exe:2540 TCP helios:4748 localhost:4747 ESTABLISHED
    firefox.exe:2540 TCP helios:4759 localhost:4760 ESTABLISHED
    firefox.exe:2540 TCP helios:4760 localhost:4759 ESTABLISHED

    Don't know if that helps at all. And some more of LnS's log

    Any other info I can/should post?
     

    Attached Files:

  4. Frederic

    Frederic LnS Developer

    Joined:
    Jan 9, 2003
    Posts:
    4,354
    Location:
    France
    Hi asyland,

    For me there is nothing else to look at on the PC.
    You are simply receiving packets on port 1427, and your PC doesn't expect them.
    Probably when you will get a new IP this will disappear.

    Frederic
     
  5. asyland

    asyland Registered Member

    Joined:
    Jun 5, 2006
    Posts:
    90
    Thanks Frederic,
    I was going to ask if I should release/renew my IP. I guess I will and see what happens.
    All the best
     
  6. asyland

    asyland Registered Member

    Joined:
    Jun 5, 2006
    Posts:
    90
    I don't know if you'll see this Frederic, but thanks for taking the time to respond. All quiet on port 1427. Released my IP address, went to work, came home and booted up, and the log is clean. Thanks again.
     
Thread Status:
Not open for further replies.