Understanding TCPView

January 17, 2010 at 16:01:38
Specs: Windows 7, Q6600/8GB DDR2
Hello,
I am using a program called PeerBlock. It blocks HTTP access to anti-p2p, government, ads and spyware ip addresses.

When I visit certain websites such as ebay or even microsoft, there is an address 208.22.87.96 - New River Community College that appears many times. Even more so, sometimes when I am typing, a ping is shown as blocked in peer block which makes me think I may have a key logger program on my computer. It was suggested to use TCPView to analyze the traffic further, but I don't understand what I'm seeing.
Please help.


See More: Understanding TCPView

Report •


#1
January 17, 2010 at 17:14:08
That IP does not belong to that college. Akamai has been linked to annoying ads, so some say.

queyosepa# whois 208.22.87.96
Sprint SPRINTLINK-BLKS (NET-208-0-0-0-1)
208.0.0.0 - 208.35.255.255
Akamai Technologies Inc. SPRINTLINK (NET-208-22-87-0-1)
208.22.87.0 - 208.22.87.255

I looked at Peer Block & it seems to block sites based on a list. I imagine you can add & delete sites. Post an example of the traffic that you want to analyse.

How do you know when a politician is lying? His mouth is moving.


Report •

#2
January 17, 2010 at 18:54:46
My images aren't showing up here, but it looks like this:
Range = New River Community College
Source = 192.168.x.x:54546
Destination = 208.22.87.19:80
Protocol = TCP
Action = Blocked

Report •

#3
January 17, 2010 at 18:57:17
It just seems suspicious as it's the only one I've noticed that gets blocked per keystroke when I'm on ebay. If I pause on a key stroke, the ping out pauses until I press another key.

Report •

Related Solutions

#4
January 17, 2010 at 19:22:58
I imagine PeerBlock is blocking that connection because of whatever config file it's reading. As I said, you should be able to tell it what to block or not block by editing that file or preferences.

How do you know when a politician is lying? His mouth is moving.


Report •

#5
January 18, 2010 at 11:42:33
Peer Block indeed blocks ip by using bock lists.
When using P2P software, there are a lot of edu, gov, com a.s.o. domains, that are also running this P2P software, to see, what one is sharing.
E.g. Microsoft, Warner Bros. a.s.o. are running several clients with P2P software.
These address ranges are stored in a block list and in that case, you may not be able to connect e.g. to www.microsoft.com.

Report •

#6
January 18, 2010 at 19:13:57
Is that the main purpose of PeerBlock, to protect users who use P2P sharing?

How do you know when a politician is lying? His mouth is moving.


Report •

#7
January 18, 2010 at 22:09:37
The main purpose of PeerBlock is:
http://www.peerblock.com
PeerBlock lets you control who your computer "talks to" on the Internet. By selecting appropriate lists of "known bad" computers, you can block communication with advertising or spyware oriented servers, computers monitoring your p2p activities, computers which have been "hacked", even entire countries! They can't get in to your computer, and your computer won't try to send them anything either.


Report •

Ask Question