Is there a way to determine which service does an outgoing connection?

Posted by fluxtendu on Super User See other posts from Super User or by fluxtendu
Published on 2010-03-19T21:01:37Z Indexed on 2010/03/19 21:11 UTC
Read the original article Hit count: 334

Filed under:

Services

|

svchost

|

connection

|

firewall

I'm redoing my firewall configuration with more restrictive policies and I would like to determine the provenance (and/or destination) of some outgoing connections.

I have an issue because they come from svchost.exe and go to web content/application delivery providers - or similar:

5 IP in range: 82.96.58.0 - 82.96.58.255      --> Akamai Technologies         akamaitechnologies.com
3 IP in range: 93.150.110.0 - 93.158.111.255  --> Akamai Technologies         akamaitechnologies.com
2 IP in range: 87.248.194.0 - 87.248.223.255  --> LLNW Europe 2               llnw.net
205.234.175.175                               --> CacheNetworks, Inc.         cachefly.net
188.121.36.239                                --> Go Daddy Netherlands B.V.   secureserver.net

So is it possible to know which service does a particular connection? Or what's your recommendation about the rules applied to these ones?

(Comodo Firewall & Windows 7)

© Super User or respective owner

Related posts about Services

Azure Mobile Services: what files does it consist of?

as seen on ASP.net Weblogs - Search for 'ASP.net Weblogs'
Azure Mobile Services is a platform that provides a small set of functionality consisting of authentication, custom data tables, custom API’s, scheduling scripts and push notifications to be used as the back-end of a mobile application or if you want, any application or web site. As described in my… >>> More
Testing your Web services using the Data Web Services Test Client

as seen on Internet.com - Search for 'Internet.com'
Paul Zikopoulos introduces you to the Data Web Services Test Client that's available in IBM Data Studio Version 1.2 or later >>> More
Silverlight 4 + RIA Services - Ready for Business: Exposing OData Services

as seen on Dot net Slackers - Search for 'Dot net Slackers'
OData is an emerging set of extensions for the ATOM protocol that makes it easier to share data over the web. To show off OData in RIA Services, lets continue our series. We think it is very interesting to expose OData from a DomainService to facilitate data sharing… >>> More
Using Analysis Services Processing Task & Analysis Services Execute DDL Task in SSIS

as seen on SQL Server Performance - Search for 'SQL Server Performance'
SQL Server Integration Services (SSIS) is a Business Intelligence tool which can be used by database developers or administrators to perform Extract, Transform & Load (ETL) operations. In my previous article Using WMI Data Reader and WMI Event Watcher ... [Read Full Article] >>> More
Navigating the Unpredictable Swinging of the Financial Regulation Pendulum

as seen on Oracle Blogs - Search for 'Oracle Blogs'
Written by Guest Blogger: Maureen Clifford, Sr Product Marketing Manager, Oracle The pendulum of the regulatory clock is constantly in motion, albeit often not in any particular rhythm. Nevertheless, given what many insurers have been through economically, any movement can send shock… >>> More

Related posts about svchost

What could be causing SVCHost to leak handles?

as seen on Server Fault - Search for 'Server Fault'
I have a problem that has been causing me all sorts of grief recently. SVCHost appears to be leaking resources all over the shop. This is the SVCHost run with the arguments "-k netsvcs". At the moment it is sitting at around 5,700 Handles being used. Before I rebooted the machine it was sitting… >>> More
Getting rid of a trojan. SVCHOST question

as seen on Super User - Search for 'Super User'
My antivirus keeps notifying me of a trojan. svchost.exe keeps creating some 'drivers' (.sys files in the drivers directory under system32 of my Windows XP installation) each of which is marked as Bubnix.AB trojan. The antivirus fails to remove many of the files as they are immediately used by svchost… >>> More
svchost consuming more than 50% CPU all the time in windows 7

as seen on Super User - Search for 'Super User'
Hello, I'm using windows 7 ultimate. svchost containing DCOM Server Process Launcher Plug and Play Power services is consuming more than 50% of CPU for most of the time. I found this blog post: http://blog.hansmelis.be/2007/06/17/windows-vista-long-delay-when-switching-songs-in-media-player/ … >>> More
svchost.exe crash on wake up

as seen on Super User - Search for 'Super User'
Lately whenever I wake up my laptop from sleep I get a series of errors (generated by a host process failing) I haven't been able to figure out why this happens but I know which host process fails and was wondering if someone had some insight on why this keeps occuring 99% of the time when my laptop… >>> More
.net generate proxy classes problem (wsdl/svchost) by soapHeader

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm using a web service from .Net C# client application. My web service has a method which return generic list and in my client application I use Configuration Service Reference to change array to generic list.Its working correctly. But when I add a soapHeader to my web service Configuration Service… >>> More