#1
  1. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jun 2006
    Posts
    26
    Rep Power
    0

    XP stops processing TCP. After some minutes OK again?!? See reply 8 inside here


    I'm pretty sure now [27/8/2012 19:00] that it is my router causing this problem.


    I have a socket program that spawns 256 threads to query 256 IP's port 80. It
    waits for them all to finish and then cycles round to begin another 256 threads.
    I had to modify TCPIP.SYS to remove the tcpip.sys socket creation limit:for it
    to function properly. viz: http://www.speedguide.net/read_articles.php?id=1497
    At a 'random' point during the processing XP stops processing incoming requests.
    In IE and chrome an attempt to connect to google will time out. Wireshark shows
    DNS functions OK when i use chrome and attempt to connect to google. If i kill
    the program after approx 1 hour XP starts accepting incoming packets. When it
    starts workng again i still have the same LAN / WAN IP's. Following is proram
    output after cancelling it.

    C:\Cpp\Port80_Multithread\Debug>Port80.exe

    End Time 20:37:44.109 25/8/2012
    Start Time 20:10:10.218 25/8/2012 212.182.082.255

    C:\Cpp\Port80_Multithread\Debug>-

    Finally an hour later XP started processing TCP packets again
    and chrome was able to show googles page without timing out.
    I can't see any clues in pfirewall.log not that I expected to.
    Can anyone shed some light on his behaviour please?

    Even rebooting [restart] does not affect it. Now I'm wondering if it's the router!
    Last edited by turnbui; August 27th, 2012 at 01:00 PM. Reason: Even rebooting [restart] does not affect it. Now I'm wondering if it's the router!
  2. #2
  3. Banned ;)
    Devshed Supreme Being (6500+ posts)

    Join Date
    Nov 2001
    Location
    Woodland Hills, Los Angeles County, California, USA
    Posts
    9,607
    Rep Power
    4247
    Sounds like you're not closing sockets properly...
    Up the Irons
    What Would Jimi Do? Smash amps. Burn guitar. Take the groupies home.
    "Death Before Dishonour, my Friends!!" - Bruce D ickinson, Iron Maiden Aug 20, 2005 @ OzzFest
    Down with Sharon Osbourne

    "I wouldn't hire a butcher to fix my car. I also wouldn't hire a marketing firm to build my website." - Nilpo
  4. #3
  5. Contributed User
    Devshed Specialist (4000 - 4499 posts)

    Join Date
    Jun 2005
    Posts
    4,377
    Rep Power
    1871
    Read up on the netstat utility.
    Use this in a separate console window.

    Run it before you run your program.

    Arrange for your program to just do 256 ports (or whatever it is you're doing).
    When it's done, run netstat again.

    Do you see a lot of new connections in a WAIT state?

    How long does it take for those WAIT states to timeout?
    If you dance barefoot on the broken glass of undefined behaviour, you've got to expect the occasional cut.
    If at first you don't succeed, try writing your phone number on the exam paper
  6. #4
  7. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jun 2006
    Posts
    26
    Rep Power
    0
    I do close each socket as i save each socket in an array just for this purpose and as shown in pfirewall.log as extract below shows.

    2012-08-25 20:36:50 OPEN TCP 192.168.1.5 212.182.70.251 1590 80 - - - - - - - - -
    2012-08-25 20:36:50 OPEN TCP 192.168.1.5 212.182.70.252 1591 80 - - - - - - - - -
    2012-08-25 20:36:50 OPEN TCP 192.168.1.5 212.182.70.253 1592 80 - - - - - - - - -
    2012-08-25 20:36:50 OPEN TCP 192.168.1.5 212.182.70.254 1593 80 - - - - - - - - -
    2012-08-25 20:36:53 CLOSE TCP 192.168.1.5 212.182.70.1 1340 80 - - - - - - - - -
    2012-08-25 20:36:53 CLOSE TCP 192.168.1.5 212.182.70.2 1341 80 - - - - - - - - -
    2012-08-25 20:36:53 CLOSE TCP 192.168.1.5 212.182.70.3 1342 80 - - - - - - - - -
    2012-08-25 20:36:53 CLOSE TCP 192.168.1.5 212.182.70.4 1343 80 - - - - - - - - -
    2012-08-25 20:36:53 CLOSE TCP 192.168.1.5 212.182.70.5 1344 80 - - - - - - - - -
    I have run nerstat -A before and after doing 256 threads/sockets but it shows nothing untoward. However it is a good idea and next time it happens i'll see what netstat shows and report back. Thanks for your help.
  8. #5
  9. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jun 2006
    Posts
    26
    Rep Power
    0
    11:59:37.390 26/8/2012 Starting at 212.184.48.255 for 255 threads 31620 sofar
    11:59:41.500 26/8/2012 Starting at 212.184.49.255 for 255 threads 31875 sofar
    11:59:45.609 26/8/2012 Starting at 212.184.50.255 for 255 threads 32130 sofar
    11:59:49.796 26/8/2012 Starting at 212.184.51.255 for 255 threads 32385 sofar
    11:59:54.78 26/8/2012 Starting at 212.184.52.255 for 255 threads 32640 sofar
    11:59:58.484 26/8/2012 Starting at 212.184.53.255 for 255 threads 32895 sofar

    excerpt from prog log showing 32895 threads/sockets so far and still no problems.
  10. #6
  11. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jun 2006
    Posts
    26
    Rep Power
    0
    C:\Cpp\Port80_Multithread\Debug>Port80.exe
    Start Time 11:49:46.671 26/8/2012 212.183.180.000


    13:3:26.437 26/8/2012 Starting at 212.187.129.255 for 255 threads 247350 sofar
    13:3:30.578 26/8/2012 Starting at 212.187.130.255 for 255 threads 247605 sofar
    13:3:34.703 26/8/2012 Starting at 212.187.131.255 for 255 threads 247860 sofar
    13:3:38.937 26/8/2012 Starting at 212.187.132.255 for 255 threads 248115 sofar

    248115 threads sofar at 13:3:38.937 26/8/2012 and still XP processing TCP OK.


    13:40:49.250 26/8/2012 Starting at 212.189.133.255 for 255 threads 378420 sofar
    13:40:53.375 26/8/2012 Starting at 212.189.134.255 for 255 threads 378675 sofar

    378675 threads sofar and still OK.

    Last time it was processing for 3 hours 18 minutes before a problem. This time I'll check netstat -A
  12. #7
  13. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jun 2006
    Posts
    26
    Rep Power
    0
    At 13:8:54.203 26/8/2012 C:\Cpp\Port80_Multithread\Debug\Port80.exe running
    this netstat -A was done.

    Active Connections

    Proto Local Address Foreign Address State
    TCP rick:ftp rick:0 LISTENING
    TCP rick:http rick:0 LISTENING
    TCP rick:epmap rick:0 LISTENING
    TCP rick:microsoft-ds rick:0 LISTENING
    TCP rick:1025 rick:0 LISTENING
    TCP rick:3306 rick:0 LISTENING
    TCP rick:1040 rick:0 LISTENING
    TCP rick:5152 rick:0 LISTENING
    TCP rick:14147 rick:0 LISTENING
    TCP rick:netbios-ssn rick:0 LISTENING
    TCP rick:1372 198.101.168.198:http LAST_ACK
    TCP rick:1632 a92-122-126-242.deploy.akamaitechnologies.com:http ESTABLISHED
    TCP rick:1636 mpr2.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:1905 lhr14s19-in-f13.1e100.net:http TIME_WAIT
    TCP rick:1906 lhr14s01-in-f26.1e100.net:http TIME_WAIT
    TCP rick:1907 lhr14s01-in-f26.1e100.net:http TIME_WAIT
    TCP rick:1908 lhr14s01-in-f26.1e100.net:http TIME_WAIT
    TCP rick:1911 lhr14s22-in-f27.1e100.net:http TIME_WAIT
    TCP rick:1912 lhr14s22-in-f27.1e100.net:http TIME_WAIT
    TCP rick:1913 lhr14s22-in-f27.1e100.net:http TIME_WAIT
    TCP rick:1914 lhr14s01-in-f13.1e100.net:http TIME_WAIT
    TCP rick:1915 lhr14s01-in-f13.1e100.net:http TIME_WAIT
    TCP rick:1916 62.128.215.90:http CLOSING
    TCP rick:1917 62.128.215.90:http TIME_WAIT
    TCP rick:1918 62.128.215.90:http CLOSING
    TCP rick:1942 mpr7.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:1943 mpr7.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:1945 mpr2.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2202 mpr7.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2203 mpr2.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2206 mpr7.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2207 mpr7.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2208 mpr2.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2209 mpr2.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2214 mpr7.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2215 72.44.192.89:http LAST_ACK
    TCP rick:2411 lhr14s01-in-f3.1e100.net:http ESTABLISHED
    TCP rick:2542 wg-in-f106.1e100.net:http TIME_WAIT
    TCP rick:2543 wg-in-f106.1e100.net:http TIME_WAIT
    TCP rick:2544 wg-in-f106.1e100.net:http FIN_WAIT_1
    TCP rick:2549 68.232.35.169:http LAST_ACK
    TCP rick:2550 we-in-f94.1e100.net:http ESTABLISHED
    TCP rick:2554 we-in-f94.1e100.net:http TIME_WAIT
    TCP rick:2555 we-in-f94.1e100.net:http TIME_WAIT
    TCP rick:2557 we-in-f94.1e100.net:http TIME_WAIT
    TCP rick:2558 we-in-f94.1e100.net:http TIME_WAIT
    TCP rick:2560 we-in-f95.1e100.net:http TIME_WAIT
    TCP rick:2691 we-in-f95.1e100.net:http TIME_WAIT
    TCP rick:2692 we-in-f95.1e100.net:http TIME_WAIT
    TCP rick:2693 we-in-f95.1e100.net:http TIME_WAIT
    TCP rick:2694 we-in-f95.1e100.net:http TIME_WAIT
    TCP rick:2695 we-in-f95.1e100.net:http FIN_WAIT_1
    TCP rick:2696 lhr14s01-in-f15.1e100.net:http FIN_WAIT_1
    TCP rick:2697 lhr14s01-in-f15.1e100.net:http TIME_WAIT
    TCP rick:2698 lhr14s01-in-f15.1e100.net:http TIME_WAIT
    TCP rick:2704 lhr14s01-in-f23.1e100.net:https ESTABLISHED
    TCP rick:2705 lhr14s01-in-f23.1e100.net:https ESTABLISHED
    TCP rick:2707 lhr14s01-in-f23.1e100.net:https ESTABLISHED
    TCP rick:2709 mpr7.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2710 lhr14s01-in-f23.1e100.net:http ESTABLISHED
    TCP rick:2711 mpr2.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2712 mpr7.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2742 mpr2.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2837 lhr14s22-in-f0.1e100.net:http ESTABLISHED
    TCP rick:2880 a92-122-126-217.deploy.akamaitechnologies.com:http ESTABLISHED
    TCP rick:2882 lhr14s01-in-f25.1e100.net:http ESTABLISHED
    TCP rick:2893 2.16.57.231:http TIME_WAIT
    TCP rick:2979 mpr7.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2980 mpr2.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2981 mpr7.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2982 mpr2.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2983 mpr7.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2984 mpr7.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2985 mpr2.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2986 mpr2.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2987 mpr7.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2988 mpr2.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2989 mpr7.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2990 mpr2.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:2991 mpr2.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:3039 ec2-50-17-199-26.compute-1.amazonaws.com:http CLOSE_WAIT
    TCP rick:3107 lhr14s19-in-f13.1e100.net:http ESTABLISHED
    TCP rick:3147 lhr14s19-in-f13.1e100.net:http ESTABLISHED
    TCP rick:3259 mpr7.ngd.vip.ch1.yahoo.com:http TIME_WAIT
    TCP rick:3370 lhr14s22-in-f15.1e100.net:http ESTABLISHED
    TCP rick:3911 212.187.169.25:http FIN_WAIT_1
    TCP rick:4069 212.187.197.1:http SYN_SENT
    TCP rick:4070 jupiter.uklo.capco.com:http SYN_SENT
    TCP rick:4071 t1.capco.com:http SYN_SENT
    TCP rick:4072 uklomlr01.capco.com:http SYN_SENT
    TCP rick:4073 212.187.197.5:http SYN_SENT
    TCP rick:4074 kworld.capco.com:http SYN_SENT
    TCP rick:4075 mercury.capco.com:http SYN_SENT
    TCP rick:4076 ftp.uklo.capco.com:http SYN_SENT
    TCP rick:4077 www.solutions.capco.com:http SYN_SENT
    TCP rick:4078 212.187.197.10:http SYN_SENT
    TCP rick:4079 support.capco.com:http SYN_SENT
    TCP rick:4080 212.187.197.12:http SYN_SENT
    TCP rick:4081 212.187.197.13:http SYN_SENT
    TCP rick:4082 212.187.197.14:http SYN_SENT
    TCP rick:4083 212.187.197.15:http SYN_SENT
    TCP rick:4084 212.187.197.16:http SYN_SENT
    TCP rick:4085 212.187.197.17:http SYN_SENT
    TCP rick:4086 212.187.197.18:http SYN_SENT
    TCP rick:4087 212.187.197.19:http SYN_SENT
    TCP rick:4088 212.187.197.20:http SYN_SENT
    TCP rick:4089 212.187.197.21:http SYN_SENT
    TCP rick:4090 212.187.197.22:http SYN_SENT
    TCP rick:4091 212.187.197.23:http SYN_SENT
    TCP rick:4092 212.187.197.24:http SYN_SENT
    TCP rick:4093 212.187.197.25:http SYN_SENT
    TCP rick:4094 212.187.197.26:http SYN_SENT
    TCP rick:4095 212.187.197.27:http SYN_SENT
    TCP rick:4096 212.187.197.28:http SYN_SENT
    TCP rick:4097 212.187.197.29:http SYN_SENT
    TCP rick:4098 212.187.197.30:http SYN_SENT
    TCP rick:4099 212.187.197.31:http SYN_SENT
    TCP rick:4100 212.187.197.32:http SYN_SENT
    TCP rick:4101 212.187.197.33:http SYN_SENT
    TCP rick:4102 212.187.197.34:http SYN_SENT
    TCP rick:4103 212.187.197.35:http SYN_SENT
    TCP rick:4104 212.187.197.36:http SYN_SENT
    TCP rick:4105 212.187.197.38:http SYN_SENT
    TCP rick:4106 212.187.197.39:http SYN_SENT
    TCP rick:4107 212.187.197.40:http SYN_SENT
    TCP rick:4108 212.187.197.37:http SYN_SENT
    TCP rick:4109 212.187.197.41:http SYN_SENT
    TCP rick:4110 212.187.197.42:http SYN_SENT
    TCP rick:4111 212.187.197.43:http SYN_SENT
    TCP rick:4112 212.187.197.44:http SYN_SENT
    TCP rick:4113 212.187.197.45:http SYN_SENT
    TCP rick:4114 212.187.197.46:http SYN_SENT
    TCP rick:4115 212.187.197.47:http SYN_SENT
    TCP rick:4116 212.187.197.48:http SYN_SENT
    TCP rick:4117 212.187.197.49:http SYN_SENT
    TCP rick:4118 212.187.197.50:http SYN_SENT
    TCP rick:4119 212.187.197.51:http SYN_SENT
    TCP rick:4120 212.187.197.52:http SYN_SENT
    TCP rick:4121 212.187.197.53:http SYN_SENT
    TCP rick:4122 212.187.197.54:http SYN_SENT
    TCP rick:4123 212.187.197.55:http SYN_SENT
    TCP rick:4124 212.187.197.56:http SYN_SENT
    TCP rick:4125 212.187.197.57:http SYN_SENT
    TCP rick:4126 212.187.197.58:http SYN_SENT
    TCP rick:4127 212.187.197.59:http SYN_SENT
    TCP rick:4128 212.187.197.60:http SYN_SENT
    TCP rick:4129 212.187.197.61:http SYN_SENT
    TCP rick:4130 212.187.197.62:http SYN_SENT
    TCP rick:4131 212.187.197.63:http SYN_SENT
    TCP rick:4132 212.187.197.64:http SYN_SENT
    TCP rick:4133 domain.not.configured:http SYN_SENT
    TCP rick:4134 domain.not.configured:http SYN_SENT
    TCP rick:4135 domain.not.configured:http SYN_SENT
    TCP rick:4136 domain.not.configured:http SYN_SENT
    TCP rick:4137 domain.not.configured:http SYN_SENT
    TCP rick:4138 domain.not.configured:http SYN_SENT
    TCP rick:4139 domain.not.configured:http SYN_SENT
    TCP rick:4140 domain.not.configured:http SYN_SENT
    TCP rick:4141 domain.not.configured:http SYN_SENT
    TCP rick:4142 domain.not.configured:http SYN_SENT
    TCP rick:4143 domain.not.configured:http SYN_SENT
    TCP rick:4144 domain.not.configured:http SYN_SENT
    TCP rick:4145 domain.not.configured:http SYN_SENT
    TCP rick:4146 domain.not.configured:http SYN_SENT
    TCP rick:4147 domain.not.configured:http SYN_SENT
    TCP rick:4148 domain.not.configured:http SYN_SENT
    TCP rick:4149 domain.not.configured:http SYN_SENT
    TCP rick:4150 domain.not.configured:http SYN_SENT
    TCP rick:4151 domain.not.configured:http SYN_SENT
    TCP rick:4152 domain.not.configured:http SYN_SENT
    TCP rick:4153 domain.not.configured:http SYN_SENT
    TCP rick:4154 domain.not.configured:http SYN_SENT
    TCP rick:4155 domain.not.configured:http SYN_SENT
    TCP rick:4156 domain.not.configured:http SYN_SENT
    TCP rick:4157 domain.not.configured:http SYN_SENT
    TCP rick:4158 domain.not.configured:http SYN_SENT
    TCP rick:4159 domain.not.configured:http SYN_SENT
    TCP rick:4160 domain.not.configured:http SYN_SENT
    TCP rick:4161 domain.not.configured:http SYN_SENT
    TCP rick:4162 domain.not.configured:http SYN_SENT
    TCP rick:4163 domain.not.configured:http SYN_SENT
    TCP rick:4164 domain.not.configured:http SYN_SENT
    TCP rick:4165 domain.not.configured:http SYN_SENT
    TCP rick:4166 domain.not.configured:http SYN_SENT
    TCP rick:4167 domain.not.configured:http SYN_SENT
    TCP rick:4168 domain.not.configured:http SYN_SENT
    TCP rick:4169 domain.not.configured:http SYN_SENT
    TCP rick:4170 domain.not.configured:http SYN_SENT
    TCP rick:4171 domain.not.configured:http SYN_SENT
    TCP rick:4172 domain.not.configured:http SYN_SENT
    TCP rick:4173 domain.not.configured:http SYN_SENT
    TCP rick:4174 domain.not.configured:http SYN_SENT
    TCP rick:4175 domain.not.configured:http SYN_SENT
    TCP rick:4176 domain.not.configured:http SYN_SENT
    TCP rick:4177 domain.not.configured:http SYN_SENT
    TCP rick:4178 domain.not.configured:http SYN_SENT
    TCP rick:4179 domain.not.configured:http SYN_SENT
    TCP rick:4180 domain.not.configured:http SYN_SENT
    TCP rick:4181 domain.not.configured:http SYN_SENT
    TCP rick:4182 domain.not.configured:http SYN_SENT
    TCP rick:4183 domain.not.configured:http SYN_SENT
    TCP rick:4184 domain.not.configured:http SYN_SENT
    TCP rick:4185 domain.not.configured:http SYN_SENT
    TCP rick:4186 domain.not.configured:http SYN_SENT
    TCP rick:4187 domain.not.configured:http SYN_SENT
    TCP rick:4188 domain.not.configured:http SYN_SENT
    TCP rick:4189 domain.not.configured:http SYN_SENT
    TCP rick:4190 domain.not.configured:http SYN_SENT
    TCP rick:4191 domain.not.configured:http SYN_SENT
    TCP rick:4192 domain.not.configured:http SYN_SENT
    TCP rick:4193 domain.not.configured:http SYN_SENT
    TCP rick:4194 domain.not.configured:http SYN_SENT
    TCP rick:4195 212.187.197.127:http SYN_SENT
    TCP rick:4196 212.187.197.128:http SYN_SENT
    TCP rick:4197 212.187.197.129:http SYN_SENT
    TCP rick:4198 212.187.197.130:http SYN_SENT
    TCP rick:4199 212.187.197.131:http SYN_SENT
    TCP rick:4200 212.187.197.132:http SYN_SENT
    TCP rick:4201 212.187.197.133:http SYN_SENT
    TCP rick:4202 212.187.197.134:http SYN_SENT
    TCP rick:4203 212.187.197.135:http SYN_SENT
    TCP rick:4204 212.187.197.136:http SYN_SENT
    TCP rick:4205 212.187.197.137:http SYN_SENT
    TCP rick:4206 212.187.197.138:http SYN_SENT
    TCP rick:4207 212.187.197.139:http SYN_SENT
    TCP rick:4208 212.187.197.140:http SYN_SENT
    TCP rick:4209 212.187.197.141:http SYN_SENT
    TCP rick:4210 212.187.197.142:http SYN_SENT
    TCP rick:4211 212.187.197.143:http SYN_SENT
    TCP rick:4212 212.187.197.144:http SYN_SENT
    TCP rick:4213 212.187.197.145:http SYN_SENT
    TCP rick:4214 212.187.197.146:http SYN_SENT
    TCP rick:4215 212.187.197.147:http SYN_SENT
    TCP rick:4216 212.187.197.148:http SYN_SENT
    TCP rick:4217 212.187.197.149:http SYN_SENT
    TCP rick:4218 212.187.197.150:http SYN_SENT
    TCP rick:4219 212.187.197.151:http SYN_SENT
    TCP rick:4220 212.187.197.152:http SYN_SENT
    TCP rick:4221 212.187.197.154:http SYN_SENT
    TCP rick:4222 212.187.197.153:http SYN_SENT
    TCP rick:4223 212.187.197.155:http SYN_SENT
    TCP rick:4224 212.187.197.156:http SYN_SENT
    TCP rick:4225 212.187.197.157:http SYN_SENT
    TCP rick:4226 212.187.197.158:http SYN_SENT
    TCP rick:4227 212.187.197.159:http SYN_SENT
    TCP rick:4228 212.187.197.160:http SYN_SENT
    TCP rick:4229 212.187.197.161:http SYN_SENT
    TCP rick:4230 212.187.197.162:http SYN_SENT
    TCP rick:4231 212.187.197.163:http SYN_SENT
    TCP rick:4232 212.187.197.164:http SYN_SENT
    TCP rick:4233 212.187.197.165:http SYN_SENT
    TCP rick:4234 212.187.197.166:http SYN_SENT
    TCP rick:4235 212.187.197.167:http SYN_SENT
    TCP rick:4236 212.187.197.168:http SYN_SENT
    TCP rick:4237 212.187.197.169:http SYN_SENT
    TCP rick:4238 212.187.197.170:http SYN_SENT
    TCP rick:4239 212.187.197.171:http SYN_SENT
    TCP rick:4240 212.187.197.172:http SYN_SENT
    TCP rick:4241 212.187.197.173:http SYN_SENT
    TCP rick:4242 212.187.197.174:http SYN_SENT
    TCP rick:4243 212.187.197.175:http SYN_SENT
    TCP rick:4244 212.187.197.176:http SYN_SENT
    TCP rick:4245 212.187.197.177:http SYN_SENT
    TCP rick:4246 212.187.197.178:http SYN_SENT
    TCP rick:4247 212.187.197.179:http SYN_SENT
    TCP rick:4248 212.187.197.180:http SYN_SENT
    TCP rick:4249 212.187.197.181:http SYN_SENT
    TCP rick:4250 212.187.197.182:http SYN_SENT
    TCP rick:4251 212.187.197.183:http SYN_SENT
    TCP rick:4252 212.187.197.184:http SYN_SENT
    TCP rick:4253 212.187.197.185:http SYN_SENT
    TCP rick:4254 212.187.197.186:http SYN_SENT
    TCP rick:4255 212.187.197.187:http SYN_SENT
    TCP rick:4256 212.187.197.188:http SYN_SENT
    TCP rick:4257 212.187.197.189:http SYN_SENT
    TCP rick:4258 212.187.197.190:http SYN_SENT
    TCP rick:4259 212.187.197.191:http SYN_SENT
    TCP rick:4260 212.187.197.192:http SYN_SENT
    TCP rick:4261 lvl3gw.thn.packetexchange.net:http SYN_SENT
    TCP rick:4262 e13-bcn2.thdoc.network-i.net:http SYN_SENT
    TCP rick:4263 212.187.197.195:http SYN_SENT
    TCP rick:4265 212.187.197.197:http SYN_SENT
    TCP rick:4266 212.187.197.198:http SYN_SENT
    TCP rick:4267 212.187.197.199:http SYN_SENT
    TCP rick:4268 212.187.197.200:http SYN_SENT
    TCP rick:4269 212.187.197.201:http SYN_SENT
    TCP rick:4270 212.187.197.202:http SYN_SENT
    TCP rick:4271 212.187.197.203:http SYN_SENT
    TCP rick:4272 212.187.197.204:http SYN_SENT
    TCP rick:4273 212.187.197.205:http SYN_SENT
    TCP rick:4274 212.187.197.206:http SYN_SENT
    TCP rick:4275 212.187.197.207:http SYN_SENT
    TCP rick:4276 p0-3356-br1-satriani.lon1.as6911.net:http SYN_SENT
    TCP rick:4277 212.187.197.209:http SYN_SENT
    TCP rick:4278 212.187.197.210:http SYN_SENT
    TCP rick:4279 gateway.l3.find-a-part.com:http SYN_SENT
    TCP rick:4280 212.187.197.212:http SYN_SENT
    TCP rick:4281 212.187.197.213:http SYN_SENT
    TCP rick:4282 212.187.197.214:http SYN_SENT
    TCP rick:4283 212.187.197.215:http SYN_SENT
    TCP rick:4284 212.187.197.216:http SYN_SENT
    TCP rick:4285 212.187.197.217:http SYN_SENT
    TCP rick:4286 212.187.197.218:http SYN_SENT
    TCP rick:4287 l3-gw.jump.net.uk:http SYN_SENT
    TCP rick:4288 212.187.197.220:http SYN_SENT
    TCP rick:4289 212.187.197.221:http SYN_SENT
    TCP rick:4290 212.187.197.222:http SYN_SENT
    TCP rick:4291 212.187.197.223:http SYN_SENT
    TCP rick:4292 212.187.197.224:http SYN_SENT
    TCP rick:4293 212.187.197.225:http SYN_SENT
    TCP rick:4294 212.187.197.226:http SYN_SENT
    TCP rick:4295 mailhost.limit.co.uk:http SYN_SENT
    TCP rick:4296 mailhost.webinsurance.co.uk:http SYN_SENT
    TCP rick:4297 212.187.197.229:http SYN_SENT
    TCP rick:4298 mailhost.pjg.org.uk:http SYN_SENT
    TCP rick:4299 212.187.197.231:http SYN_SENT
    TCP rick:4300 212.187.197.232:http SYN_SENT
    TCP rick:4301 212.187.197.233:http SYN_SENT
    TCP rick:4302 212.187.197.234:http SYN_SENT
    TCP rick:4303 212.187.197.235:http SYN_SENT
    TCP rick:4304 212.187.197.236:http SYN_SENT
    TCP rick:4305 212.187.197.237:http SYN_SENT
    TCP rick:4306 212.187.197.238:http SYN_SENT
    TCP rick:4307 212.187.197.239:http SYN_SENT
    TCP rick:4308 212.187.197.240:http SYN_SENT
    TCP rick:4309 212.187.197.241:http SYN_SENT
    TCP rick:4310 212.187.197.242:http SYN_SENT
    TCP rick:4311 212.187.197.243:http SYN_SENT
    TCP rick:4312 212.187.197.244:http SYN_SENT
    TCP rick:4313 212.187.197.245:http SYN_SENT
    TCP rick:4314 212.187.197.246:http SYN_SENT
    TCP rick:4315 212.187.197.247:http SYN_SENT
    TCP rick:4316 212.187.197.248:http SYN_SENT
    TCP rick:4317 212.187.197.249:http SYN_SENT
    TCP rick:4318 212.187.197.250:http SYN_SENT
    TCP rick:4319 inproma.iprights.com:http SYN_SENT
    TCP rick:4320 212.187.197.252:http SYN_SENT
    TCP rick:4321 212.187.197.253:http SYN_SENT
    TCP rick:4322 212.187.197.254:http SYN_SENT
    TCP rick:4692 212.187.172.5:http TIME_WAIT
    TCP rick:4698 212.187.172.11:http TIME_WAIT
    TCP rick:4720 212.187.172.33:http TIME_WAIT
    TCP rick:4723 212.187.172.36:http TIME_WAIT
    TCP rick:4730 212.187.172.43:http TIME_WAIT
    TCP rick:4820 212.187.172.59:http TIME_WAIT
    TCP rick:4822 212.187.172.61:http TIME_WAIT
    TCP rick:4839 212.187.172.78:http TIME_WAIT
    TCP rick:4858 212.187.172.97:http TIME_WAIT
    TCP rick:4859 212.187.172.98:http TIME_WAIT
    TCP rick:4861 212.187.172.100:http TIME_WAIT
    TCP rick:4862 212.187.172.101:http TIME_WAIT
    UDP rick:microsoft-ds *:*
    UDP rick:isakmp *:*
    UDP rick:1028 *:*
    UDP rick:1588 *:*
    UDP rick:1589 *:*
    UDP rick:3394 *:*
    UDP rick:4211 *:*
    UDP rick:4212 *:*
    UDP rick:4230 *:*
    UDP rick:4500 *:*
    UDP rick:4507 *:*
    UDP rick:ntp *:*
    UDP rick:1042 *:*
    UDP rick:1048 *:*
    UDP rick:1900 *:*
    UDP rick:3092 *:*
    UDP rick:ntp *:*
    UDP rick:netbios-ns *:*
    UDP rick:netbios-dgm *:*
    UDP rick:1900 *:*



    At 13:58

    Active Connections

    Proto Local Address Foreign Address State
    TCP rick:ftp rick:0 LISTENING
    TCP rick:http rick:0 LISTENING
    TCP rick:epmap rick:0 LISTENING
    TCP rick:microsoft-ds rick:0 LISTENING
    TCP rick:1025 rick:0 LISTENING
    TCP rick:3306 rick:0 LISTENING
    TCP rick:1040 rick:0 LISTENING
    TCP rick:5152 rick:0 LISTENING
    TCP rick:14147 rick:0 LISTENING
    TCP rick:netbios-ssn rick:0 LISTENING
    TCP rick:3039 ec2-50-17-199-26.compute-1.amazonaws.com:http CLOSE_WAIT
    TCP rick:3104 nated1.cdt.eu.int:http SYN_SENT
    TCP rick:3105 wb-in-f95.1e100.net:http TIME_WAIT
    TCP rick:3105 nated2.cdt.eu.int:http SYN_SENT
    TCP rick:3106 wb-in-f95.1e100.net:http TIME_WAIT
    TCP rick:3106 nated3.cdt.eu.int:http SYN_SENT
    TCP rick:3107 wb-in-f95.1e100.net:http TIME_WAIT
    TCP rick:3107 nated4.cdt.eu.int:http SYN_SENT
    TCP rick:3108 nated5.cdt.eu.int:http SYN_SENT
    TCP rick:3109 nated6.cdt.eu.int:http SYN_SENT
    TCP rick:3110 nated7.cdt.eu.int:http SYN_SENT
    TCP rick:3111 nated8.cdt.eu.int:http SYN_SENT
    TCP rick:3112 nated9.cdt.eu.int:http SYN_SENT
    TCP rick:3113 nated10.cdt.eu.int:http SYN_SENT
    TCP rick:3114 nated11.cdt.eu.int:http SYN_SENT
    TCP rick:3115 nated12.cdt.eu.int:http SYN_SENT
    TCP rick:3116 nated13.cdt.eu.int:http SYN_SENT
    TCP rick:3117 nated14.cdt.eu.int:http SYN_SENT
    TCP rick:3118 212.190.115.15:http SYN_SENT
    TCP rick:3119 212.190.115.16:http SYN_SENT
    TCP rick:3120 212.190.115.17:http SYN_SENT
    TCP rick:3121 cdtns1.cdt.europa.eu:http SYN_SENT
    TCP rick:3122 mailrelay.cdt.eu.int:http SYN_SENT
    TCP rick:3123 artemis.cdt.eu.int:http SYN_SENT
    TCP rick:3124 212.190.115.21:http SYN_SENT
    TCP rick:3125 odin.cdt.eu.int:http SYN_SENT
    TCP rick:3126 ns2.cdt.eu.int:http SYN_SENT
    TCP rick:3127 wcmprod.cdt.eu.int:http SYN_SENT
    TCP rick:3128 212.190.115.25:http SYN_SENT
    ...
    TCP rick:3153 212.190.115.50:http SYN_SENT
    TCP rick:3154 iate.terminology.cdt.eu.int:http SYN_SENT
    TCP rick:3155 iateas.terminology.cdt.eu.int:http SYN_SENT
    TCP rick:3156 212.190.115.53:http SYN_SENT
    ...
    TCP rick:3357 212.190.115.253:http SYN_SENT
    TCP rick:3358 212.190.115.254:http SYN_SENT
    TCP rick:3587 lhr14s01-in-f14.1e100.net:http ESTABLISHED
    TCP rick:3588 lhr14s01-in-f2.1e100.net:http ESTABLISHED
    TCP rick:4110 wg-in-f94.1e100.net:http ESTABLISHED
    TCP rick:4119 lhr08s04-in-f23.1e100.net:http ESTABLISHED
    TCP rick:4121 lhr08s04-in-f23.1e100.net:https ESTABLISHED
    TCP rick:4122 lhr08s04-in-f23.1e100.net:https ESTABLISHED
    TCP rick:4443 wb-in-f106.1e100.net:http TIME_WAIT
    TCP rick:4450 wb-in-f106.1e100.net:http TIME_WAIT
    TCP rick:4451 wb-in-f106.1e100.net:http TIME_WAIT
    UDP rick:microsoft-ds *:*
    ...
    UDP rick:netbios-ns *:*
    UDP rick:netbios-dgm *:*
    UDP rick:1900 *:*
  14. #8
  15. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jun 2006
    Posts
    26
    Rep Power
    0

    Here's the story:-


    At 08-26-2012 16:57:59 XP stopped processing incominp TCP.
    At 18:00 XP started processing incominp TCP again.
    Here's the story:-
    At 17:22:45 Netstat -A showed following

    Active Connections

    Proto Local Address Foreign Address State
    TCP rick:ftp rick:0 LISTENING
    TCP rick:http rick:0 LISTENING
    TCP rick:epmap rick:0 LISTENING
    TCP rick:microsoft-ds rick:0 LISTENING
    TCP rick:1025 rick:0 LISTENING
    TCP rick:3306 rick:0 LISTENING
    TCP rick:1040 rick:0 LISTENING
    TCP rick:5152 rick:0 LISTENING
    TCP rick:14147 rick:0 LISTENING
    TCP rick:netbios-ssn rick:0 LISTENING
    TCP rick:1170 portal.plus.net:https SYN_SENT
    TCP rick:1171 portal.plus.net:https SYN_SENT
    TCP rick:1172 portal.plus.net:https SYN_SENT
    TCP rick:1173 portal.plus.net:https SYN_SENT
    TCP rick:1174 portal.plus.net:https SYN_SENT
    TCP rick:1175 portal.plus.net:https SYN_SENT
    TCP rick:1431 lhr08s04-in-f31.1e100.net:http SYN_SENT
    TCP rick:1432 lhr08s04-in-f31.1e100.net:http SYN_SENT
    TCP rick:ms-sql-s lhr08s04-in-f31.1e100.net:http SYN_SENT
    TCP rick:ms-sql-m lhr08s04-in-f31.1e100.net:https SYN_SENT
    TCP rick:1435 lhr08s04-in-f31.1e100.net:https SYN_SENT
    TCP rick:1436 wb-in-f103.1e100.net:http SYN_SENT
    TCP rick:1437 wb-in-f103.1e100.net:http SYN_SENT
    TCP rick:1438 63.131.149.244:http SYN_SENT
    TCP rick:1439 63.131.149.244:http SYN_SENT
    TCP rick:1440 63.131.149.244:http SYN_SENT
    TCP rick:1441 lhr08s04-in-f31.1e100.net:https SYN_SENT
    TCP rick:2207 212.201.205.1:http SYN_SENT
    TCP rick:2208 212.201.205.2:http SYN_SENT
    ... ditto fo IP's .3 - .253
    TCP rick:2507 212.201.205.254:http SYN_SENT
    TCP rick:3039 ec2-50-17-199-26.compute-1.amazonaws.com:http CLOSE_WAIT
    UDP rick:microsoft-ds *:*
    UDP rick:isakmp *:*
    UDP rick:1028 *:*
    UDP rick:1588 *:*
    UDP rick:1589 *:*
    UDP rick:3394 *:*
    UDP rick:4211 *:*
    UDP rick:4212 *:*
    UDP rick:4230 *:*
    UDP rick:4500 *:*
    UDP rick:4507 *:*
    UDP rick:ntp *:*
    UDP rick:1042 *:*
    UDP rick:1048 *:*
    UDP rick:1900 *:*
    UDP rick:3092 *:*
    UDP rick:ntp *:*
    UDP rick:netbios-ns *:*
    UDP rick:netbios-dgm *:*
    UDP rick:1900 *:*

    then I killed the prog. Can't connect to google with chrome - timeouts.
    C:\Cpp\Port80_Multithread\Debug>Port80.exe
    End Time 17:22:58.937 26/8/2012
    Start Time 11:49:46.656 26/8/2012 212.201.208.255 5 hours 30 mins.
    C:\Cpp\Port80_Multithread\Debug>

    last 2 lines in my dyndns.log; It checks wth dydns.org every 5 mis.
    1 08-25-2012 20:40:37 Unable to determine WAN IP. Can't update.
    1 08-26-2012 16:57:59 Last message repeated 3 times.

    Very little in netstat at 17:23:07.
    Active Connections

    Proto Local Address Foreign Address State
    TCP rick:ftp rick:0 LISTENING
    TCP rick:http rick:0 LISTENING
    TCP rick:epmap rick:0 LISTENING
    TCP rick:microsoft-ds rick:0 LISTENING
    TCP rick:1025 rick:0 LISTENING
    TCP rick:3306 rick:0 LISTENING
    TCP rick:1040 rick:0 LISTENING
    TCP rick:5152 rick:0 LISTENING
    TCP rick:14147 rick:0 LISTENING
    TCP rick:netbios-ssn rick:0 LISTENING
    TCP rick:2926 wb-in-f147.1e100.net:http SYN_SENT
    TCP rick:2927 wb-in-f147.1e100.net:http SYN_SENT
    TCP rick:2928 63.131.144.201:http SYN_SENT
    TCP rick:2929 63.131.144.201:http SYN_SENT
    TCP rick:2930 63.131.144.201:http SYN_SENT
    TCP rick:2931 lhr14s19-in-f31.1e100.net:https SYN_SENT
    TCP rick:3039 ec2-50-17-199-26.compute-1.amazonaws.com:http CLOSE_WAIT
    UDP rick:microsoft-ds *:*
    UDP rick:isakmp *:*
    UDP rick:1028 *:*
    UDP rick:1588 *:*
    UDP rick:1589 *:*
    UDP rick:3394 *:*
    UDP rick:4211 *:*
    UDP rick:4212 *:*
    UDP rick:4230 *:*
    UDP rick:4500 *:*
    UDP rick:4507 *:*
    UDP rick:ntp *:*
    UDP rick:1042 *:*
    UDP rick:1048 *:*
    UDP rick:1900 *:*
    UDP rick:3092 *:*
    UDP rick:ntp *:*
    UDP rick:netbios-ns *:*
    UDP rick:netbios-dgm *:*
    UDP rick:1900 *:*

    Last 4 lines in my progs log fie.
    17:22:46.718 26/8/2012 Starting at 212.201.205.255 for 255 threads 1177080 sofar
    Above IP were last netsat showed immed before ctrl-C the prog.
    17:22:50.796 26/8/2012 Starting at 212.201.206.255 for 255 threads 1177335 sofar
    17:22:54.875 26/8/2012 Starting at 212.201.207.255 for 255 threads 1177590 sofar
    17:22:58.937 26/8/2012 Starting at 212.201.208.255 for 255 threads 1,177,845 sofar

IMN logo majestic logo threadwatch logo seochat tools logo