NETSTAT -b option.... SYN_SEND ... SYN_SENT...

[BoazBoaz]

1) How come I don't see any reference to the netstat -b option on (for
example) on :


http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/netstat.mspx?mfr=true


2) On this page also I found the SYN_SEND description
But on my PC I see the SYN_SENT



What is my mistake ???

I'm XP SP2

Included my PC logs:
====================================================================================================
Active Connections

Proto Local Address Foreign Address State PID
TCP boaz-202ilhwj43:2426 212.72.49.131:http SYN_SENT 2548
[Skype.exe]

=====================================================================================================

netstat -h

Displays protocol statistics and current TCP/IP network connections.

NETSTAT [-a] [-b] [-e] [-n] [-o] [-p proto] [-r] [-s] [-v] [interval]

-b Displays the executable involved in creating each connection
or
listening port. In some cases well-known executables host
multiple independent components, and in these cases the
sequence of components involved in creating the connection
or listening port is displayed. In this case the executable
name is in [] at the bottom, on top is the component it
called,
and so forth until TCP/IP was reached. Note that this option
can be time-consuming and will fail unless you have
sufficient
permissions.


============================================================================================================

 

[Jon]

1) How come I don't see any reference to the netstat -b option on (for
example) on :


http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/netstat.mspx?mfr=true


2) On this page also I found the SYN_SEND description
But on my PC I see the SYN_SENT



What is my mistake ???

I'm XP SP2

Included my PC logs:
====================================================================================================
Active Connections

Proto Local Address Foreign Address State PID
TCP boaz-202ilhwj43:2426 212.72.49.131:http SYN_SENT 2548
[Skype.exe]

=====================================================================================================

netstat -h

Displays protocol statistics and current TCP/IP network connections.

NETSTAT [-a] [-b] [-e] [-n] [-o] [-p proto] [-r] [-s] [-v] [interval]

-b Displays the executable involved in creating each
connection or
listening port. In some cases well-known executables host
multiple independent components, and in these cases the
sequence of components involved in creating the connection
or listening port is displayed. In this case the executable
name is in [] at the bottom, on top is the component it
called,
and so forth until TCP/IP was reached. Note that this
option
can be time-consuming and will fail unless you have
sufficient
permissions.


============================================================================================================

-v option is also conspicuous by its absence. Probably means its usage is
being "discouraged".

Jon

 

[Guest]

Simply a new tool version...

The

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/netstat.mspx?mfr=true

Should be updated ...

1) How come I don't see any reference to the netstat -b option on (for
example) on :


http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/netstat.mspx?mfr=true


2) On this page also I found the SYN_SEND description
But on my PC I see the SYN_SENT



What is my mistake ???

I'm XP SP2

Included my PC logs:
====================================================================================================
Active Connections

Proto Local Address Foreign Address State PID
TCP boaz-202ilhwj43:2426 212.72.49.131:http SYN_SENT 2548
[Skype.exe]

=====================================================================================================

netstat -h

Displays protocol statistics and current TCP/IP network connections.

NETSTAT [-a] [-b] [-e] [-n] [-o] [-p proto] [-r] [-s] [-v] [interval]

-b Displays the executable involved in creating each
connection or
listening port. In some cases well-known executables host
multiple independent components, and in these cases the
sequence of components involved in creating the connection
or listening port is displayed. In this case the executable
name is in [] at the bottom, on top is the component it
called,
and so forth until TCP/IP was reached. Note that this
option
can be time-consuming and will fail unless you have
sufficient
permissions.


============================================================================================================

-v option is also conspicuous by its absence. Probably means its usage is
being "discouraged".

Jon