svchost question

[Guest]

[Torso]

After installing 3.10 connections grown up as i said in previous posts. Comodo's DNS server is doing this.

[HeffeD]

After installing 3.10 connections grown up as i said in previous posts. Comodo's DNS server is doing this.

I'm not using Comodo's DNS servers and I'm seeing more connections reported than I was used to seeing with previous releases.

[Toggie]

If you believe there is something amiss may I suggest you download a copy of CurrPorts : Monitor TCP/IP network connections on Windows Start a log running, browse few pages in your browser, paying careful attention to the links on any given page. Once done, close and analyse the log.

[HeffeD]

I don't think anything is amiss, it's just different than the way it used to work.

Just out of curiosity, I added network.dns.disablePrefetch and set it to True. I see no difference in the amount of outbound connections generated when opening multiple taps simultaneously.

I see the same result with IE7 and from what I've read, it doesn't support prefetching. 

[Toggie]

Ah well! that was only my best guess, apologies if it was a false trail...

[HeffeD]

No worries Toggie! I learned a few things on the journey. 

[Reptil]

I olso see many conections SVCHOST:EXE when browsing pages sometimes 50+ but they drop after some seconds spoted that when i instaled CIS lates version by clicking on active connections i toguht it was CIS Foult and got instaled firefox 3.5 ,formated computer instaled all firefox 3.5 this time not CIS yust to see is it CIS foult instaled Outpost Firewall free same thing hapend. On other system in other room is instaled olso Firefox but not 3.5,and Outpost firewall free and i dont see that much connections when i open pages.

[dAlden]

After reading this thread, I am beginning to believe I'm not nuts afterall. I've got a similar problem and it seemed to start after an automatic Comodo update last week. Here's the link to my message:

http://forums.comodo.com/firewall_help/network_defense_showing_97_outbound_connection-t42427.0.html

I get a bazillion TCP outbound connections under svchost and iexplore.exe. They all tend to go away after awhile, but I start out with a gaggle of them - all small in size, and many of the destination IP's are duplicates and triplicates of one another.

CHEERS!

dAlden

[kail]

I would like to share something that I happen to encounter & record whilst investigating this issue. I did use a packet sniffer, but I'm not going bore you with the entire capture session (that would require a packet sniffer to read), just the image of the DNS lookup requests & replies entering http://slashdot.org/ using Firefox 3.5.

A few things to note; I was not using Comodo's Secure DNS. This only happen once in four attempts using the same browser session. This was the forth attempt. I was sloppy & may have cut some off.

[Reptil]

Thank you kail for sharing that info with us

[Tags:]