| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 54251 | 2005-02-07 21:34:00 | Continuous SYN_SEND's on netstat | wardleyboy69 (7186) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 322569 | 2005-02-07 21:34:00 | Hi, im on broadband and getting slow speeds and frequently no web pages. I phoned my supplier who asked me to run netstat, and found a continuous link of SYN_SEND's appearing to microsoft. Can anybody help me to fix this problem. Cheers. |
wardleyboy69 (7186) | ||
| 322570 | 2005-02-07 21:52:00 | can you please provide a dump of the netstat results? | whetu (237) | ||
| 322571 | 2005-02-08 00:05:00 | Hi, im on broadband and getting slow speeds and frequently no web pages. I phoned my supplier who asked me to run netstat, and found a continuous link of SYN_SEND's appearing to microsoft. Can anybody help me to fix this problem. Cheers. You have an application in your system trying to set up a connection with a MS server. Since it is continuous it sounds like the MS server is not responding. Find out the culprit and kill it. Note that the MS server should be responding and the SYN_SEND packets would stop. Some malware contnuously send SYN packets with a different return address, so that the server responds to someone else. This is typical of distributed denial of service attacks against remote servers. |
vinref (6194) | ||
| 1 | |||||