I have a problem where any internet application is making multiple connections to the internet on different ports - including Firefox, Skype, any update connections etc. I’ve tried a number of online and installed antivirus and malware scanners and I cannot find any problem. All connections are visible in the Comodo connections window.
There’s nothing odd in the HJT log or at least nothing odd to my eye (or googles). Are you using a tabbed browser that opens multiple pages by default? Maxthon, Slim Browser and AMBrowser will open separate connections for each tab that opens, even thought there is only a single instance of the app running.
What are the other ports that the browser is making a connection on?
Ewen,
If I open this webpage in Firefox (only one tab) I can get up to 15 connections. Most connections appear to be on ports 80 and 53. Internet Explorer, Skype, Services.exe and any internet application appears to be making multiple connections although the ports used vary by application.
It appears to happen only when the program is in use, so for example as I type this entry, the number of connections has dropped to 2. As soon as I use Firefox again, the number immediately increases, which really slows down your browsing.
I’ve checked the support centre and there’s nothing related to this issue mentioned. I’ll post a link in the moderators area and see if anyone else has an idea on this Colin.
Is there inbound data in relation to each of the connections? This can be checked if you open CFP and click ACTIVITY - CONNECTIONS. In the Connections window you can see the inbond and outbound data streams for each connection.
A bit OT: There’s something I’ve always wondered in the Connections window. Why is it that there are times when I know it’s just an outgoing connection yet it shows TCP In/Out, and vice versa? In CFP’s terminology, the forward slash / symbol represents and instead of or as per the rules system.
Back to Colin’s question: it’s not unusual for a program to have multiple connections, but 15 might be a bit too many. However, if Firefox had many tabs or if you visited certain sites, this is normal and expected. How long do these multi connections generally last just by leaving the program dormant?
There is outbound and inbound activity. When I opened Firefox with one tab on this web page, maybe ten or more connections opened. With 30 seconds of inactivity this reduced to 4. These are the connection that remained opened.
Source
192.168.1.1 ports 3052,54,57,58
Destination
209.149.207.16:80
216.239.59.103:80
66.102.9.147:80
72.14.217.93:80
Although these are port 80 others open on 53.
Within a minute or so these reduced to one connecton.
As you surf it adds connections to the list and keeps them open and closing them slowly.
All connections have inbound and outbound traffic although they only appear to transfer data while the web page is loading. IE does the same thing. Other applications and services are affected but they do not open so many connections, with the exception of Skype which can open 10 or more.
Ports 53 (http) and 80 (DNS) are givens for any browser, so that’s normal.
I think there’s no real problem here, Colin, as I also notice mine connections disappearing as time elapses. And 30 secs is average. I currently have 3 tabs open in Opera and 9 connections. Depending how your browser and computer is configured, it can use up to x simultaneous connections (to speed up connections to the servers and browse/download faster, obviously).
As for Skype, I don’t know if 10+ is normal. Overall, I don’t think there’s an issue here.
Ewena and Soya - thanks for your help. I found a nice little app, called cports, that allowed me to reolve the connections and there doesn’t appear to be a problem.
Thanks again,
Muz.