CableNut Help Please

JKO · February 15, 2006

I've been reading here in the forum and I see you guys are very helpful so I ran this test with HiJackThis so you guys can see the results so if anyone can help me here I really dont know whats wrong here but I'll let the pros handle this. I dont know if this is the test I needed to do to get a css file for cablenut and if its not then im sorry, My download speeds goes up and goes down and never stays the same and my upload speed is the worst it stays at 16Kbps and I think they capped me again so any help would be appreciated, Thanks

Logfile of HijackThis v1.99.1

Scan saved at 4:08:03 PM, on 2/15/2006

Platform: Windows XP SP1 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:

C:WINDOWSSystem32smss.exe

C:WINDOWSsystem32winlogon.exe

C:WINDOWSsystem32services.exe

C:WINDOWSsystem32lsass.exe

C:WINDOWSsystem32svchost.exe

C:WINDOWSSystem32svchost.exe

C:WINDOWSExplorer.EXE

C:PROGRA~1mcafee.comagentmcagent.exe

C:Program FilesCommon FilesAOL1118859330eeaolsoftware.exe

c:progra~1mcafee.comvsomcvsescn.exe

C:PROGRA~1PURENE~1PORTMA~1PortAOL.exe

C:PROGRA~1MUSICM~1MUSICM~2MMDiag.exe

C:WINDOWSsystem32spoolsv.exe

C:Program FilesMusicmatchMusicmatch Jukeboxmim.exe

c:program filescommon filesaol1118859330eeservicesantiSpywareAppver2_0_7AOLSP Scheduler.exe

c:program filescommon filesaol1118859330eeaolsoftware.exe

C:Program FilesCommon FilesAOLACSAOLAcsd.exe

C:WINDOWSSystem32DRIVERSCDANTSRV.EXE

c:program filesmcafee.comagentmcdetect.exe

c:PROGRA~1mcafee.comagentmctskshd.exe

C:WINDOWSSystem32MsPMSPSv.exe

C:Program FilesRaxcoPerfectDiskPDSched.exe

C:WINDOWSSystem32wuauclt.exe

c:PROGRA~1mcafee.comvsomcvsshld.exe

c:PROGRA~1mcafee.comvsomcvsrte.exe

c:PROGRA~1mcafee.comvsomcshield.exe

C:Documents and SettingsJoshuDesktophijackthisHijackThis.exe

R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = http=dsl132-67.fastxdsl.nl:3128

O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - C:Program FilesDAPDAPBHO.dll

O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:Program FilesAOL Toolbartoolbar.dll

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx

O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:progra~1mcafee.comvsomcvsshl.dll

O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:Program FilesDAPDAPIEBar.dll

O4 - HKLM..Run: [HostManager] C:Program FilesCommon FilesAOL1118859330eeAOLHostManager.exe

O4 - HKLM..Run: [VSOCheckTask] "c:PROGRA~1mcafee.comvsomcmnhdlr.exe" /checktask

O4 - HKLM..Run: [VirusScan Online] "c:PROGRA~1mcafee.comvsomcvsshld.exe"

O4 - HKLM..Run: [MCAgentExe] c:PROGRA~1mcafee.comagentmcagent.exe

O4 - HKLM..Run: [MCUpdateExe] c:PROGRA~1mcafee.comagentmcupdate.exe

O4 - HKLM..Run: [Pure Networks Port Magic] "C:PROGRA~1PURENE~1PORTMA~1PortAOL.exe" -Run

O4 - HKLM..Run: [MimBoot] C:PROGRA~1MUSICM~1MUSICM~2mimboot.exe

O4 - HKLM..Run: [smcService] C:PROGRA~1SygateSPFsmc.exe -startgui

O4 - HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k

O4 - HKLM..Run: [CleanUp] C:PROGRA~1McAfee.comSharedmcappins.exe /v=3 /cleanup

O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:Program FilesAmerica Online 9.0caoltray.exe

O8 - Extra context menu item: &AIM Search - res://C:Program FilesAIM ToolbarAIMBar.dll/aimsearch.htm

O8 - Extra context menu item: &AOL Toolbar search - res://C:Program FilesAOL Toolbartoolbar.dll/SEARCH.HTML

O8 - Extra context menu item: &Download with &DAP - C:PROGRA~1DAPdapextie.htm

O8 - Extra context menu item: Download &all with DAP - C:PROGRA~1DAPdapextie2.htm

O8 - Extra context menu item: RapidShare-Download - res://C:DOCUME~1JoshuLOCALS~1Tempir_ext_temp_0AutoPlayDocsmore-rapid.exe/RsMenExt.html

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_02binnpjpi150_02.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_02binnpjpi150_02.dll

O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:Program FilesAOL Toolbartoolbar.dll

O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:Program FilesAOL Toolbartoolbar.dll

O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:PROGRA~1DAPDAP.EXE

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:WINDOWSSystem32Shdocvw.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengerMSMSGS.EXE

O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengerMSMSGS.EXE

O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab

O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB

O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) - http://www.pcpitstop.com/internet/pcpConnCheck.cab

O16 - DPF: {33331111-1111-1111-1111-611111193457} -

O16 - DPF: {33331111-1111-1111-1111-611111193458} -

O16 - DPF: {33331111-1111-1111-1111-622221193458} - file://c:ex.cab

O16 - DPF: {33E54F7F-561C-49E6-929B-D7E76D3AFEB1} (Pool Control) - http://www.worldwinner.com/games/v48/pool/pool.cab

O16 - DPF: {43331111-1111-1111-1111-611111195622} -

O16 - DPF: {46C66BBD-E667-4DAD-9682-58050E7C9FDC} (CDPass Class) - http://www.cdpass.com/cdkey/CDPass.cab

O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} -

O16 - DPF: {58FC4C77-71C2-4972-A8CD-78691AD85158} (BJA Control) - http://www.worldwinner.com/games/v49/bjattack/bjattack.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1124068153546

O16 - DPF: {64311111-1111-1121-1111-111191113457} - file://c:eied_s7.cab

O16 - DPF: {6C6FE41A-0DA6-42A1-9AD8-792026B2B2A7} (FreeCell Control) - http://www.worldwinner.com/games/v40/freecell/freecell.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1133987621359

O16 - DPF: {6F6DBC29-7A0C-4AC0-A42D-10EC70678526} (Word Cubes Control) - http://www.worldwinner.com/games/v44/wordcube/wordcube.cab

O16 - DPF: {6FDB0065-2787-11D6-B1D8-0001023916FC} (CLOActiveXInstaller Control) - http://www.igl.net/clo/install/grab/CLOActiveXInstallerProj1.cab

O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) - http://www.worldwinner.com/games/shared/wwlaunch.cab

O16 - DPF: {94299420-321F-4FF9-A247-62A23EBB640B} (WordMojo Control) - http://www.worldwinner.com/games/v45/wordmojo/wordmojo.cab

O16 - DPF: {9903F4ED-B673-456A-A15F-ED90C7DE9EF5} (Sol Control) - http://www.worldwinner.com/games/v45/sol/sol.cab

O16 - DPF: {9D8D7672-93FF-417E-9024-C16AD141C50C} (Haunted Control) - http://www.worldwinner.com/games/v49/haunted/haunted.cab

O16 - DPF: {A52FBD2B-7AB3-4F6B-90E3-91C772C5D00F} (WoF Control) - http://www.worldwinner.com/games/v46/wof/wof.cab

O16 - DPF: {AC2881FD-5760-46DB-83AE-20A5C6432A7E} (SwapIt Control) - http://www.worldwinner.com/games/v64/swapit/swapit.cab

O16 - DPF: {B06CE1BC-5D9D-4676-BD28-1752DBF394E0} (Hangman Control) - http://www.worldwinner.com/games/v40/hangman/hangman.cab

O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) -

O16 - DPF: {BA94245D-2AA0-4953-9D9F-B0EE4CC02C43} (Tile City Control) - http://www.worldwinner.com/games/v41/tilecity/tilecity.cab

O16 - DPF: {C738EA53-97C2-441B-AC52-DFBC597BCBE5} (Chess Control) - http://www.worldwinner.com/games/v48/chess/chess.cab

O16 - DPF: {C93C1C34-CEA9-49B1-9046-040F59E0E0D8} (Paint Control) - http://www.worldwinner.com/games/v42/paint/paint.cab

O16 - DPF: {CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA} (Java Plug-in 1.5.0_01) -

O16 - DPF: {FAE74270-E5EE-49C3-B816-EA8B4D55F38F} (H2hPool Control) - http://www.worldwinner.com/games/v51/h2hpool/h2hpool.cab

O20 - Winlogon Notify: igfxcui - C:WINDOWSSYSTEM32igfxsrvc.dll

O20 - Winlogon Notify: WB - C:PROGRA~1StardockOBJECT~1WINDOW~1fastload.dll

O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:Program FilesCommon FilesAOLACSAOLAcsd.exe

O23 - Service: AOL Spyware Protection Service (AOLService) - Unknown owner - C:PROGRA~1COMMON~1AOLAOLSPY~1aolserv.exe (file missing)

O23 - Service: asurscsi - Unknown owner - C:Program FilesVoyetraAudioSurgeon 5asurscsi.exe (file missing)

O23 - Service: C-DillaSrv - C-Dilla Ltd - C:WINDOWSSystem32DRIVERSCDANTSRV.EXE

O23 - Service: iPod Service (iPodService) - Unknown owner - C:Program FilesiPodbiniPodService.exe (file missing)

O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:program filesmcafee.comagentmcdetect.exe

O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:PROGRA~1mcafee.comvsomcshield.exe

O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:PROGRA~1mcafee.comagentmctskshd.exe

O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:PROGRA~1McAfee.comAgentmcupdmgr.exe

O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - McAfee, Inc - c:PROGRA~1mcafee.comvsomcvsrte.exe

O23 - Service: NTBOOTMGR (NTBOOT) - Unknown owner - C:WINDOWSSYSTEMDRIVERntuser.exe (file missing)

O23 - Service: NTLOAD - Unknown owner - C:WINDOWSSYSTEMDRIVERntsrv.exe (file missing)

O23 - Service: NTSVCMGR - Unknown owner - C:WINDOWSSYSTEMDRIVERntsrv.exe (file missing)

O23 - Service: PDEngine - Raxco Software, Inc. - C:Program FilesRaxcoPerfectDiskPDEngine.exe

O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:Program FilesRaxcoPerfectDiskPDSched.exe

O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:Program FilesSygateSPFsmc.exe

O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:Program FilesTuneUp Utilities 2006WinStylerThemeSvc.exe

trogers · February 15, 2006

Hi JKO,

Please do these 2 tests and post your results:

https://www.speedguide.net/analyzer.php

http://nitro.ucsc.edu/

For the 2nd test, please also post the reports hidden in the 'Statistics' and 'More Details' buttons below the test box.

JKO · February 15, 2006

OK lets hope I did this right heres the first test

SpeedGuide.net TCP/IP Analyzer

TCP properties for IP = 205.188.117.9 ()

Browser/OS = Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1)

Notes: Read the Analyzer FAQ if the above is not your IP address.

TCP options string = 020405b40101040201030300

MTU = 1500

MTU is fully optimized for broadband.

MSS = 1460

Maximum useful data in each packet = 1460, which equals MSS.

Default TCP Receive Window (RWIN) = 5840

RWIN Scaling (RFC1323) = 0 bits

Unscaled TCP Receive Window = 5840

RWIN seems to be set to a very small number. If you're on a broadband connection, consider using a larger value.

RWIN is a multiple of MSS

Other RWIN values that might work well with your current MTU/MSS:

513920 (MSS x 44 * scale factor of

256960 (MSS x 44 * scale factor of 4)

128480 (MSS x 44 * scale factor of 2)

64240 (MSS x 44)

bandwidth * delay product (Note this is not a speed test):

Your TCP Window limits you to: 233.6 kbps (29.2 KBytes/s) @ 200ms

Your TCP Window limits you to: 93.44 kbps (11.68 KBytes/s) @ 500ms

Consider increasing your RWIN value to optimize TCP/IP for broadband.

MTU Discovery (RFC1191) = ON

Time to live left = 57 hops

TTL value is ok.

Timestamps (RFC1323) = OFF

Selective Acknowledgements (RFC2018) = ON

IP type of service field (RFC1349) = 00000000 (0)

Now heres the 2nd test

TCP/Web100 Network Diagnostic Tool v5.3.3d

click START to begin

Checking for Middleboxes . . . . . . . . . . . . . . . . . . Done

running 10s outbound test (client to server) . . . . . 145.06Kb/s

running 10s inbound test (server to client) . . . . . . 623.12kb/s

Your PC is connected to a Cable/DSL modem

Information: The receive buffer should be 82.56 Kbytes to maximize throughput

The Statistics

WEB100 Enabled Statistics:

Checking for Middleboxes . . . . . . . . . . . . . . . . . . Done

running 10s outbound test (client to server) . . . . . 145.06Kb/s

running 10s inbound test (server to client) . . . . . . 623.12kb/s

------ Client System Details ------

OS data: Name = Windows XP, Architecture = x86, Version = 5.1

Java data: Vendor = Sun Microsystems Inc., Version = 1.5.0_02

------ Web100 Detailed Analysis ------

Cable modem/DSL/T1 link found.

Link set to Full Duplex mode

No network congestion discovered.

Good network cable(s) found

Normal duplex operation found.

Web100 reports the Round trip time = 225.47 msec; the Packet size = 1460 Bytes; and

No packet loss was observed.

This connection is receiver limited 90.56% of the time.

Increasing the the client's receive buffer (17.0 KB) will improve performance

This connection is network limited 9.41% of the time.

Web100 reports TCP negotiated the optional Performance Settings to:

RFC 2018 Selective Acknowledgment: ON

RFC 896 Nagle Algorithm: ON

RFC 3168 Explicit Congestion Notification: OFF

RFC 1323 Time Stamping: OFF

RFC 1323 Window Scaling: OFF

Packet size is preserved End-to-End

Server IP addresses are preserved End-to-End

Information: Network Address Translation (NAT) box is modifying the Client's IP address

Server says [67.87.199.162] but Client says [192.168.1.100]

More Details

WEB100 Kernel Variables:

Client: localhost/127.0.0.1

AckPktsIn: 274

AckPktsOut: 0

BytesRetrans: 0

CongAvoid: 0

CongestionOverCount: 0

CongestionSignals: 0

CountRTT: 274

CurCwnd: 18980

CurMSS: 1460

CurRTO: 470

CurRwinRcvd: 17520

CurRwinSent: 16304

CurSsthresh: 2147483647

DSACKDups: 0

DataBytesIn: 0

DataBytesOut: 792780

DataPktsIn: 0

DataPktsOut: 543

DupAcksIn: 0

ECNEnabled: 0

FastRetran: 0

MaxCwnd: 18980

MaxMSS: 1460

MaxRTO: 690

MaxRTT: 390

MaxRwinRcvd: 17520

MaxRwinSent: 16304

MaxSsthresh: 0

MinMSS: 1460

MinRTO: 370

MinRTT: 110

MinRwinRcvd: 17520

MinRwinSent: 16304

NagleEnabled: 1

OtherReductions: 0

PktsIn: 274

PktsOut: 543

PktsRetrans: 0

X_Rcvbuf: 103424

RcvWinScale: 2147483647

SACKEnabled: 3

SACKsRcvd: 0

SendStall: 0

SlowStart: 11

SampleRTT: 150

SmoothedRTT: 220

X_Sndbuf: 103424

SndWinScale: 2147483647

SndLimTimeRwin: 9308892

SndLimTimeCwnd: 967752

SndLimTimeSender: 2609

SndLimTransRwin: 1

SndLimTransCwnd: 1

SndLimTransSender: 1

SndLimBytesRwin: 746060

SndLimBytesCwnd: 46720

SndLimBytesSender: 0

SubsequentTimeouts: 0

SumRTT: 61780

Timeouts: 0

TimestampsEnabled: 0

WinScaleRcvd: 2147483647

WinScaleSent: 2147483647

DupAcksOut: 0

StartTimeUsec: 586596

Duration: 10281752

c2sData: 2

c2sAck: 2

s2cData: 2

s2cAck: 2

half_duplex: 0

link: 100

congestion: 0

bad_cable: 0

mismatch: 0

spd: 0.00

bw: 49.40

loss: 0.000001000

avgrtt: 225.47

waitsec: 0.00

timesec: 10.00

order: 0.0000

rwintime: 0.9056

sendtime: 0.0003

cwndtime: 0.0941

rwin: 0.1337

swin: 0.7891

cwin: 0.1448

rttsec: 0.225474

Sndbuf: 103424

aspd: 4.77837

Checking for mismatch on uplink

(speed > 50 [0>50], (xmitspeed < 5) [0.14<5]

(rwintime > .9) [0.90>.9], (loss < .01) [1.0E<.01]

Checking for excessive errors condition

(loss/sec > .15) [1.0E>.15], (cwndtime > .6) [0.09>.6],

(loss < .01) [1.0E<.01], (MaxSsthresh > 0) [0>0]

Checking for 10 Mbps link

(speed < 9.5) [0<9.5], (speed > 3.0) [0>3.0]

(xmitspeed < 9.5) [0.14<9.5] (loss < .01) [1.0E<.01], (mylink > 0) [3.0>0]

Checking for Wireless link

(sendtime = 0) [3.0E=0], (speed < 5) [0<5]

(Estimate > 50 [49.4>50], (Rwintime > 90) [0.90>.90]

(RwinTrans/CwndTrans = 1) [1/1=1], (mylink > 0) [3.0>0]

Checking for DSL/Cable Modem link

(speed < 2) [0<2], (SndLimTransSender = 0) [1=0]

(SendTime = 0) [3.0E-4=0], (mylink > 0) [3.0>0]

Checking for half-duplex condition

(rwintime > .95) [0.90>.95], (RwinTrans/sec > 30) [0.1>30],

(SenderTrans/sec > 30) [0.1>30], OR (mylink <= 10) [3.0<=10]

Checking for congestion

(cwndtime > .02) [0.09>.02], (mismatch = 0) [0=0]

(MaxSsthresh > 0) [0>0]

estimate = 49.4 based on packet size = 11Kbits, RTT = 225.47msec, and loss = 1.0E-6

The theoretical network limit is 49.4 Mbps

The NDT server has a 101.0 KByte buffer which limits the throughput to 3.49 Mbps

Your PC/Workstation has a 17.0 KByte buffer which limits the throughput to 0.59 Mbps

The network based flow control limits the throughput to 0.64 Mbps

Client Data reports link is 'T1', Client Acks report link is 'T1'

Server Data reports link is 'T1', Server Acks report link is 'T1'

trogers · February 16, 2006

What speed did you pay your ISP to give you?

JKO · February 16, 2006

Hi Trogers, To be honest I really dont know how much is the speed I am paying for but when I called the technician told me I get 10Mbps down and up to 1Mbps upload, I was capped once and I think I was capped again

trogers · February 16, 2006

I do not see any indication your ISP has capped you.

But your RWIN is too low at 5840 and this setting cap your bandwidth to only 0.59 Mbps.

"Your PC/Workstation has a 17.0 KByte buffer which limits the throughput to 0.59 Mbps"

Your RTT value is rather high if you are in the US. Perhaps some electrical noise is affecting your signal. Keep your modem and router a few feet apart as there are known instances routers emit EMI and slow the modem. Other possible sources of EMI are sound speakers and cordless phone.

Try this ccs file with the Cablenut Adjuster.

JKO · February 16, 2006

Well I thought I was capped again seeing that my upload speed has been no more than 18kpbs for the past week, I will try the css file now and let you know. Also I dont have anything around the modem or the router just a few data CD's laying around them, I did have the modem right next to the router til I read here on the forum that IS NOT GOOD so its a few inches away from it now til I find some space to put the modem a few feet away from it, But thanks alot for your help on this I wll try the css file now

JKO · February 16, 2006

Just tried the CSS file and rebooted and the download speed is still the same and so is the upload as well so I dont see any improvement, I think im just gonna give up on this cuz this is so frustating for me and its been like this for a weeks now but I really appreciate your help trogers thanks alot

:::.. Download Stats ..:::

Connection is:: 4736 Kbps about 4.7 Mbps (tested with 12160 kB)

Download Speed is:: 578 kB/s

Tested From:: https://testmy.net

Test Time:: Thu Feb 16 00:29:18 EST 2006

Bottom Line:: 85X faster than 56K 1MB download in 1.77 sec

Diagnosis: May need help : running at only 70.54 % of your hosts average (optonline.net)

Validation Link:: https://testmy.net/stats/id-27XELGBH5

:::.. Upload Stats ..:::

Connection is:: 137 Kbps about 0.1 Mbps (tested with 97 kB)

Upload Speed is:: 17 kB/s

Tested From:: https://testmy.net

Test Time:: Thu Feb 16 00:29:50 EST 2006

Bottom Line:: 2X faster than 56K 1MB upload in 60.24 sec

Diagnosis: May need help : running at only 21.71 % of your hosts average (optonline.net)

Validation Link:: https://testmy.net/stats/id-L72EPI0A9

trogers · February 16, 2006

Do a DOS command "netstat -b" to see what programs and how many ports are opened to the internet. When too many ports are opened, our bandwidth will be scattered. This is also a good way to check if we have some hidden intruders in our comp.

JKO · February 16, 2006

ok this is what I got when I did that I really dont know too much about this but here ya go

Microsoft Windows XP [Version 5.1.2600]

C:Documents and SettingsJoshu>netstat -b

Displays protocol statistics and current TCP/IP network connections.

NETSTAT [-a] [-e] [-n] [-o] [-s] [-p proto] [-r] [interval]

-a Displays all connections and listening ports.

-e Displays Ethernet statistics. This may be combined with the -s

option.

-n Displays addresses and port numbers in numerical form.

-o Displays the owning process ID associated with each connection.

-p proto Shows connections for the protocol specified by proto; proto

may be any of: TCP, UDP, TCPv6, or UDPv6. If used with the -s

option to display per-protocol statistics, proto may be any of:

IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP, or UDPv6.

-r Displays the routing table.

-s Displays per-protocol statistics. By default, statistics are

shown for IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP, and UDPv6;

the -p option may be used to specify a subset of the default.

interval Redisplays selected statistics, pausing interval seconds

between each display. Press CTRL+C to stop redisplaying

statistics. If omitted, netstat will print the current

configuration information once.

C:Documents and SettingsJoshu>-a

'-a' is not recognized as an internal or external command,

operable program or batch file.

C:Documents and SettingsJoshu>netstat -a

Active Connections

Proto Local Address Foreign Address State

TCP josh-lkwqpdmo29:epmap josh-lkwqpdmo29:0 LISTENING

TCP josh-lkwqpdmo29:microsoft-ds josh-lkwqpdmo29:0 LISTENING

TCP josh-lkwqpdmo29:1028 josh-lkwqpdmo29:0 LISTENING

TCP josh-lkwqpdmo29:4400 josh-lkwqpdmo29:0 LISTENING

TCP josh-lkwqpdmo29:4615 josh-lkwqpdmo29:0 LISTENING

TCP josh-lkwqpdmo29:4660 josh-lkwqpdmo29:0 LISTENING

TCP josh-lkwqpdmo29:https josh-lkwqpdmo29:0 LISTENING

TCP josh-lkwqpdmo29:3001 josh-lkwqpdmo29:0 LISTENING

TCP josh-lkwqpdmo29:3002 josh-lkwqpdmo29:0 LISTENING

TCP josh-lkwqpdmo29:3003 josh-lkwqpdmo29:0 LISTENING

TCP josh-lkwqpdmo29:4735 localhost:11523 TIME_WAIT

TCP josh-lkwqpdmo29:11523 josh-lkwqpdmo29:0 LISTENING

TCP josh-lkwqpdmo29:netbios-ssn josh-lkwqpdmo29:0 LISTENING

TCP josh-lkwqpdmo29:4400 ats-rda.dial.aol.com:5190 ESTABLISHED

TCP josh-lkwqpdmo29:4615 64.12.26.165:5190 ESTABLISHED

TCP josh-lkwqpdmo29:4660 64.233.161.99:http ESTABLISHED

UDP josh-lkwqpdmo29:microsoft-ds *:*

UDP josh-lkwqpdmo29:isakmp *:*

UDP josh-lkwqpdmo29:3004 *:*

UDP josh-lkwqpdmo29:3006 *:*

UDP josh-lkwqpdmo29:3021 *:*

UDP josh-lkwqpdmo29:3027 *:*

UDP josh-lkwqpdmo29:3638 *:*

UDP josh-lkwqpdmo29:3639 *:*

UDP josh-lkwqpdmo29:ntp *:*

UDP josh-lkwqpdmo29:1026 *:*

UDP josh-lkwqpdmo29:3005 *:*

UDP josh-lkwqpdmo29:3022 *:*

UDP josh-lkwqpdmo29:3024 *:*

UDP josh-lkwqpdmo29:3555 *:*

UDP josh-lkwqpdmo29:ntp *:*

UDP josh-lkwqpdmo29:domain *:*

UDP josh-lkwqpdmo29:bootps *:*

UDP josh-lkwqpdmo29:bootpc *:*

UDP josh-lkwqpdmo29:ntp *:*

UDP josh-lkwqpdmo29:netbios-ns *:*

UDP josh-lkwqpdmo29:netbios-dgm *:*

UDP josh-lkwqpdmo29:ntp *:*

UDP josh-lkwqpdmo29:netbios-ns *:*

UDP josh-lkwqpdmo29:netbios-dgm *:*

UDP josh-lkwqpdmo29:4411 *:*

C:Documents and SettingsJosh>

trogers · February 16, 2006

"netstat - a" command only display the ports opened but does not associate the programs with the ports.

Use "netstat -a -b" command.

JKO · February 16, 2006

Sorry TRogers that I keep buggin you with this but this is what I got when I typed out what you just told me to type out which was> Use "netstat -a -b" command.

C:Documents and SettingsJosh>netstat -a -b

Displays protocol statistics and current TCP/IP network connections.

NETSTAT [-a] [-e] [-n] [-o] [-s] [-p proto] [-r] [interval]

-a Displays all connections and listening ports.

-e Displays Ethernet statistics. This may be combined with the -s

option.

-n Displays addresses and port numbers in numerical form.

-o Displays the owning process ID associated with each connection.

-p proto Shows connections for the protocol specified by proto; proto

may be any of: TCP, UDP, TCPv6, or UDPv6. If used with the -s

option to display per-protocol statistics, proto may be any of:

IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP, or UDPv6.

-r Displays the routing table.

-s Displays per-protocol statistics. By default, statistics are

shown for IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP, and UDPv6;

the -p option may be used to specify a subset of the default.

interval Redisplays selected statistics, pausing interval seconds

between each display. Press CTRL+C to stop redisplaying

statistics. If omitted, netstat will print the current

configuration information once.

I am sorry I am a complete noob when it comes to this

trogers · February 16, 2006

Hmmm...I am not sure why you cannot get a readout. Mine is as follows:

Microsoft Windows XP [Version 5.1.2600]

C:Documents and Settingsyou>netstat -a -b

Active Connections

Proto Local Address Foreign Address State PID

TCP YOU:epmap YOU:0 LISTENING 1376

C:WINDOWSsystem32mclsp.dll

C:WINDOWSsystem32mclsphlrgdlsphlr.dll

c:windowssystem32WS2_32.dll

C:WINDOWSsystem32RPCRT4.dll

c:windowssystem32rpcss.dll

[svchost.exe]

TCP YOU:microsoft-ds YOU:0 LISTENING 4

[system]

TCP YOU:pop3 YOU:0 LISTENING 2040

[MSKSrvr.exe]

TCP YOU:1027 YOU:0 LISTENING 300

[alg.exe]

TCP YOU:2010 YOU:0 LISTENING 2040

[MSKSrvr.exe]

TCP YOU:1029 localhost:1030 ESTABLISHED 3376

[firefox.exe]

TCP YOU:1030 localhost:1029 ESTABLISHED 3376

[firefox.exe]

TCP YOU:1422 85.67-18-179.reverse.theplanet.com:http CLOSE_W

AIT 3376

[firefox.exe]

TCP YOU:1423 85.67-18-179.reverse.theplanet.com:http CLOSE_W

AIT 3376

[firefox.exe]

UDP YOU:1032 *:* 1628

[svchost.exe]

UDP YOU:microsoft-ds *:* 4

[system]

UDP YOU:1037 *:* 1628

[svchost.exe]

UDP YOU:ntp *:* 1476

C:WINDOWSsystem32mclsp.dll

C:WINDOWSsystem32mclsphlrgdlsphlr.dll

c:windowssystem32WS2_32.dll

c:windowssystem32w32time.dll

ntdll.dll

[svchost.exe]

UDP YOU:ntp *:* 1476

C:WINDOWSsystem32mclsp.dll

C:WINDOWSsystem32mclsphlrgdlsphlr.dll

c:windowssystem32WS2_32.dll

c:windowssystem32w32time.dll

ntdll.dll

[svchost.exe]

C:Documents and Settingsyou>

trogers · February 16, 2006

Anyway, I have only elementary knowledge with regards to spyware and intrusion programs. You may be able to find good advice in this area at the forum sections on HELP or General Discussion.

JKO · February 16, 2006

OK, I will do that and thanks alot Trogers for all your help I appreciate it

FallowEarth · February 17, 2006

What's also handy:

netstat -ano

Shows foreign address, port, state, and associated PID. This way you can associate each connection to what process is using it. Bring up the task manager, click View --> Set Columns and then check PID.

Sign In

CableNut Help Please

Recommended Posts

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Join the conversation