netstat/port question

When I run netstat, I always get ports established that are never port 80.
IE., currently

x.x.x.3127
x.x.x.3146
x.x.x.3154

etc.

I have XP with cable modem and firewall activated. I have TCP filtering. I
have Norton Internet Security. How come I never see port 80 being used! Does
this mean a lot or nothing?

Thanks

Jacko

"Jacko" <> wrote
> When I run netstat, I always get ports established that are never port 80.
> IE., currently
>
> x.x.x.3127
> x.x.x.3146
> x.x.x.3154
>
> etc.
>
> I have XP with cable modem and firewall activated. I have TCP filtering. I
> have Norton Internet Security. How come I never see port 80 being used! Does
> this mean a lot or nothing?

I am a newb to security so someone please butt-in if I am wrong.

I believe that port 80 (and most registered ports) are used by a
daemon. This means that the web server you are connected to is sending
you the web pages from its' port 80 (sometimes 8080, sometimes others)
but it may connect to any open 'unregistered' port which tends to be
the higher port numbers. I also believe that each http connection will
increment the port number by one.

I web page may reguire several http connections in order to download
the document, any frames, CSS, java, and images. A typical Hotmail
page may require around 30 connections. This would mean that a netstat
done while first loading the page (before the images download) may
reveal port 3000 being used. If you go to another page and netstat,
you will probably find something like port 3030 being used.

So, in short, Port 80 is the port that web pages and http requests are
served from. You probably will never use this port on your computer
unless you are running a web server.

HTH

Aaron Lingwood
<eth0-fifo>

"Jacko" <> wrote in message news:<2Zh1b.171169$ .net>...
> When I run netstat, I always get ports established that are never port 80.
> IE., currently
>
> x.x.x.3127
> x.x.x.3146
> x.x.x.3154
>
> etc.
>
> I have XP with cable modem and firewall activated. I have TCP filtering. I
> have Norton Internet Security. How come I never see port 80 being used! Does
> this mean a lot or nothing?
>
> Thanks

Try netstat -an, i guess you just typed netstat and then they are
listed as http. Or better yet try netstat /? to see the available
options.

Best Regards
QbiT
--
It is better, of course, to know useless things than to know nothing.
- Seneca

Thanks for information, but still confused. So, if I am communicating
through various ports, how do I make sure they are firewalled, or are they
automatically by NIS?

Thanks
"QbiT" <> wrote in message
news: om...
> "Jacko" <> wrote in message
news:<2Zh1b.171169$ .net>...
> > When I run netstat, I always get ports established that are never port
80.
> > IE., currently
> >
> > x.x.x.3127
> > x.x.x.3146
> > x.x.x.3154
> >
> > etc.
> >
> > I have XP with cable modem and firewall activated. I have TCP filtering.
I
> > have Norton Internet Security. How come I never see port 80 being used!
Does
> > this mean a lot or nothing?
> >
> > Thanks
>
> Try netstat -an, i guess you just typed netstat and then they are
> listed as http. Or better yet try netstat /? to see the available
> options.
>
> Best Regards
> QbiT
> --
> It is better, of course, to know useless things than to know nothing.
> - Seneca