You can do this with multiple hits of "refresh"
(although I didn't get a new port with each click)
What setting do you have for checking the cache?
(E.g. Alt-T,O,Alt-S,...) If it is None Refresh wouldn't do much.
If it is Every Visit you would probably get the most new connections.
It would also help to press Ctrl-F5 instead of just F5 (Refresh)
I think in case that invoked extra redirects. Having a page with
content from lots of different sites would probably add to the number
of connections each Ctrl-F5 would make too.
IE only uses port 80 for all web pages.
Port 80 is the default host port for (unencrypted) HTTP traffic.
Port 443 is the default host port for (encrypted) HTTPS traffic.
This doesn't say anything about which *client* port is being used.
Perhaps those are the ports that mydoom exploits?
Try this as a refinement of your diagnostic (if you are using XP):
Try to simulate the same thing otherwise if possible.
tasklist /fi "IMAGENAME EQ iexplore.exe"
That should give you the PID of your IE task. (You should be able
to get the same thing from Task Manager very easily.)
For example, I did that and found my current PID is 792
Now enter whatever you got for PID where I enter 792
in the next command (notice the leading space):
netstat -a -n -o | find " 792"
In IE go somewhere where there is lots of content preferably from lots
of different sites. Issue the above command. Press Ctrl-F5
and issue the above command again.
FWIW when I do that all the ports used by IE under the column labeled
"Foreign Address" are 80. The ports used by IE under the column
labeled "Local Address" do indeed seem to be increasing.
HTH
Robert Aldwinckle