Need help interpreting a netstat

[Make7]

1. You could disconnect from di.fm and redo the netstat to see what goes away.

You can ignore all the 127.0.0.1 connections - that's the loopback address to your own computer. If you check your computer name, you'll probably discover it is WIN-297AT2QPODG.

Not sure how one determines the actual foreign address from that netstat info. Try netstat -f or netstat -n (or netstat /? to see all the options).

I usually use Wireshark to sniff out network traffic - it lets you view each packet on a selected network adapter. You can see what IP address the packets are coming from/going to - then use those addresses to do reverse IP lookups and (hopefully) find out who is on the other end.


BTW - For those links to dnsstuff.com, you can replace the | with %7C to make the full link work. Like this:

http://www.dnsstuff.com/tools#whois%7Ctype=ipv4&&value=104.16.18.80