Thread: whats uploading?

From a command prompt, type:
netstat -b

This will output the active connections and the executable associated with the connection.

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\GUINESS>netstat -b

Active Connections

Proto Local Address Foreign Address State PID
TCP bluey:1025 localhost:44334 ESTABLISHED 2276
[kpf4gui.exe]

TCP bluey:1033 localhost:1038 ESTABLISHED 2276
[kpf4gui.exe]

TCP bluey:1038 localhost:1033 ESTABLISHED 1048
[kpf4ss.exe]

TCP bluey:1052 localhost:44334 ESTABLISHED 3168
[kpf4gui.exe]

TCP bluey:1055 localhost:1057 ESTABLISHED 3168
[kpf4gui.exe]

TCP bluey:1057 localhost:1055 ESTABLISHED 1048
[kpf4ss.exe]

TCP bluey:3303 localhost:3304 ESTABLISHED 3752
[firefox.exe]

TCP bluey:3304 localhost:3303 ESTABLISHED 3752
[firefox.exe]

TCP bluey:3306 localhost:3307 ESTABLISHED 3752
[firefox.exe]

TCP bluey:3307 localhost:3306 ESTABLISHED 3752
[firefox.exe]

TCP bluey:44334 localhost:1052 ESTABLISHED 1048
[kpf4ss.exe]

TCP bluey:44334 localhost:1025 ESTABLISHED 1048
[kpf4ss.exe]

TCP bluey:3696 192.168.0.1:49152 ESTABLISHED 948
c:\windows\system32\WS2_32.dll
C:\WINDOWS\System32\WINHTTP.dll
[svchost.exe]

TCP bluey:1940 uslec-66-255-53-12.cust.uslec.net:http CLOSE_WA
IT 1596
[untray.exe]

TCP bluey:3492 ip202-182-124-178.voicevalley-networks.com:http
CLOSE_WAIT 3752
[firefox.exe]

TCP bluey:3485 ip202-182-124-178.voicevalley-networks.com:http
TIME_WAIT 0

C:\Documents and Settings\GUINESS>




this is all that shows up---
the last 3 or 4 not sure about---

Is Kerio the only firewall you are using or is the Windows firewall turned on still?

If you run netstat with you browser, mail etc closed, it will give you an idea of any apps that are keeping a connection active.

D'oh!

Originally Posted by Pedro_The_Swift

I have a little app that shows up/download speeds

What's the app?

Its called Bitmeter

and when I shut down
Generic Host Process
the up/down stops

Sounds like a bit torrent program, i had a similar problem but now i shut down the program once i have finished.