TCP Statistics IPv4 active opens?

75 pts.
Tags:
IPv4
Microsoft Windows XP
TCP/IP
Windows XP SP3
If I restart my computer I will have 6 to 10 active opens. In the course of about 4 days, I will have over 35000 and my computer slows to a crawl unless I restart it. At best, I am running 4 computers and an xbox. Its seem to have something to do with Windows XP service pack 3 as I reloaded Windows XP with SP1 then 2 and it was fine. Now 3 and its messing up again.....any help would be most appreciated. Lyle

Software/Hardware used:
Windows XP SP3

Answer Wiki

Thanks. We'll let you know when a new response is added.

What leads you to believe that the number of Active Opens are an issue? I would consider watching netstat (or <a href=”http://technet.microsoft.com/en-us/sysinternals/bb897437.aspx”>Sysinternals tcpview</a>) to watch network connections to see if some application is opening unexpected network connections.

I would suspect that there is something else slowing down your computer. There is possibly an application with a memory leak. Network protocol stats would not show something like that. Maybe run perfmon for a period of time and see if you see any trending in some stats like available memory or CPU utilization.

Discuss This Question: 14  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • TomLiotta
    I have no useful info, but a similar situation has happened for Windows 2000 in recent months. Somewhere around two months ago, Win2K PCs that auto-applied fixes started seriously slowing down on internet connections... unless they had at least 2GB RAM and a "modern" (fast) CPU. WinXP has been less of an issue, but a lot more RAM/CPU is still what has been making the difference for me. I have two Win XP PCs here side by side. The less powerful one is right at the edge of usability for this site. Another Win2K PC is useless for this site, though it's fine for almost everything else, including the often slow IBM Information Center sites that I access most often with it. In any case, it happened within a few days time for at least half a dozen PCs that I use on a couple different decently secured networks. Kaspersky AV 6.0 on some, AVG 9.0 on others, generally clean systems. No Linux PCs showed any differences. Tom
    125,585 pointsBadges:
    report
  • Ldpfeifer
    I am running 2GB of ram and Athlon 3200 64. I am thinking of going to Windows 7 just to be done with XP. The last time I loaded it, 84 patches had to be down loaded to bring it up to speed. Maybe its time to give BGates some more money. Thanks for sharing. Lyle
    75 pointsBadges:
    report
  • TomLiotta
    I am running 2GB of ram and Athlon 3200 64. I'd first try some serious cleanup then. Tools such as CCleaner and at least a few others are worth giving a try. Your hardware is right near the minimum for decent Win2k internet performance now, but seems fine for WinXP, even on a bottom-tier DSL link for me. I'd suspect something else. I am thinking of going to Windows 7 Good luck with that. If it does stuff you like without doing even more stuff that you don't like, I guess you'll do okay. Win7 is beyond my personal irritation boundary. (So was WinXP, but I've learned enough about how shut the irritating behaviors off to feel comfortable.) Maybe you could consider Linux. I've begun a PC-by-PC transition. In my home network, it's currently the only "always reliable" link to the outside. I'm in the midst of converting another home PC to a distro different from previous just to start learning about alternatives. It's hard to beat the price. Networking with my Windows PCs is fairly easy and lets me transition gradually. Tom
    125,585 pointsBadges:
    report
  • Ldpfeifer
    2 days and now 44104 active opens. Not sure where or what to check and its getting slower to load any pages. I am almost ready to restart it, but was hoping someone could point me somewhere. I have checked programs and everything seems OK. Again, I ran the computer for a few days after I loaded Windows XP sp1 and fine. I added sp2 and fine. I was gone on a trip and my wife click on the Windows update and added sp3 and here we are again. I use AVG free and Trend house call sometimes. I had CCleaner on it before and took it off, but will try it again. I just would like to know why it keeps adding the IPv4 active opens. With 3 to 4 computers and an Xbox I would think maybe in the line of 40 or 50?? would be a number, even 300 but 44000 and counting?? Are there any programs I should be looking at as a cause? My kids could have something on their computers but this is the only one hooked up directly to the modem, the rest are wireless. Thanks again, I appreciate all thoughts and help as I am quite confused at this point. Lyle
    75 pointsBadges:
    report
  • Ldpfeifer
    In the 5 minutes I took to write that last post, 44160 now. Lyle
    75 pointsBadges:
    report
  • Ldpfeifer
    Can anyone tell me what how many IPv4 ports would be normal to have open? Lyle
    75 pointsBadges:
    report
  • Ldpfeifer
    46201 now. Lyle
    75 pointsBadges:
    report
  • TomLiotta
    What "State" do they mostly show when you run a basic NETSTAT command? And can you determine what protocol is used? (In particular, does the "Foreign Address" end in 'http' or does it end in a number?) Tom
    125,585 pointsBadges:
    report
  • Ldpfeifer
    3 foreign address, all in numbers, and they show established. Protocol is TCP. Lyle
    75 pointsBadges:
    report
  • Labnuke99
    This is why the tcpview utility is so useful. Another useful Sysinternals tool is the procexp tool. Both of these can help you understand what applications are opening connections to external destinations. It is possible that your computer has been compromised by a rootkit and many of the detection methods you are currently using are unreliable due to this compromise.
    32,960 pointsBadges:
    report
  • Labnuke99
    What toolbars (Google desktop, Yahoo, etc.) are you running? Each of these can keep multiple open connections to the internet even though no browsing activity is happening.
    32,960 pointsBadges:
    report
  • Ldpfeifer
    No toolbars, as I have come to dislike them and never down load them or remove them. I am running the procexp tool now. Lyle
    75 pointsBadges:
    report
  • Pjb0222
    Look at TCP view or NETSTAT and see if you can tell the process(es) involved. It could be an application issue or malware issue. It could also be a DOS type attack as well. It will eat available memory and eventually will cause the system to run out of available ports. Which can cause other problems.
    3,310 pointsBadges:
    report
  • TomLiotta
    Which can cause other problems. ...such as not being able to return to this site to post results or get additional suggestions! :-) Tom
    125,585 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following