Daimo B 
Member 
 
Registered: 20th Mar 00
 
User status: Offline 
 
 | 
 
Services... 
 
Basically, we are on a new backup software.  It requires use of port 10000 to start the backup software service.  After a reboot though, it seems another server has taken up port 10000 so I can't start my backups   
 
I've run netstat -a and i think i've found whatever is using port 10000. 
 
 s0000024:3852          s0000024.ecdomain.net:10000  SYN_SENT 
 
 
But I don't know what to do with it?  I've tried netstop on both (3852 and syn_sent) as im presuming this is the service using port 10000, but I can't find anything. 
 
has anyone got a bit of code that'll find what the exact service name is so I can stop this service, to start my backup service?  
 
Taaaaaaa
 | 
Dom 
Member 
 
Registered: 13th Sep 03
 
User status: Offline 
 
 | 
 
Find out the PID by doing a 'netstat -ano' then do a 'tasklist /svc' and it'll list the service(s) using that PID. Although (this is my basic understanding) if you're getting a lot of SYN_SENT then it's likely to be something probing and/or a SYN flood. If ecdomain.net is nothing to do with you (it points to the company, SCA) then i'd just block it and go from there. 
 
This might also be of some use - http://www.linklogger.com/TCP10000.htm
 | 
John 
Member 
 
Registered: 30th Jun 03
 
User status: Offline 
 
 | 
 
Can you not just set the service to startup with windows, never seen one that requires access to a port to start before only possibly to accept requests when it's already started.
 | 
Bart 
Member 
 
Registered: 19th Aug 02
 Location: Midsomer Norton, Bristol Avon 
User status: Offline 
 
 | 
 
Can you not change the port of your backup software? You usually can in the preferences.
 | 
pow 
Premium Member
 
Registered: 11th Sep 06
 Location: Hazlemere, Buckinghamshire 
User status: Offline 
 
 | 
 
Would be pretty micky mouse if you can't do the above...
 | 
pow 
Premium Member
 
Registered: 11th Sep 06
 Location: Hazlemere, Buckinghamshire 
User status: Offline 
 
 | 
 
SYN_SENT is just a type of packet by the way.
 | 
Daimo B 
Member 
 
Registered: 20th Mar 00
 
User status: Offline 
 
 | 
 
Will have a go. 
 
Cannot change the port of the backup as the service requires port 10000.  And no, its not a crappy backup software . 
 
Dom, ecdomain is our domain, SCA is our company. 
 
[Edited on 20-08-2010 by Daimo B]
 | 
Dom 
Member 
 
Registered: 13th Sep 03
 
User status: Offline 
 
 | 
 
It's not Backup Exec is it? If it is then you can change the default port, have a look on the Symantec support site. 
 
Edit - Changing the default port of the software should the first port (no pun intended) of call when in this type of situation, especially if there is nothing wrong with your, as shutting down (random) services will usually just cause you more headaches than it's worth. If you do go down the latter route, then make sure you make a note of what services you have stopped/disabled just in case anything does happen. 
 
[Edited on 20-08-2010 by Dom]
 | 
Bart 
Member 
 
Registered: 19th Aug 02
 Location: Midsomer Norton, Bristol Avon 
User status: Offline 
 
 | 
 
We use backup exec and I think its a bag of wank, but from what I gather, its the industry standard. 
 
I would love for some weathly individual to buy out symantec and shut the whole company down...
 | 
John 
Member 
 
Registered: 30th Jun 03
 
User status: Offline 
 
 | 
 
Storage Craft is where it's at these days, everyone does use BE though.
 | 
Steve 
Premium Member
 
Registered: 30th Mar 02
 Location: Worcestershire             Drives: Defender 
User status: Offline 
 
 | 
 
BE is shit, so is Yosemite tbh
 | 
Daimo B 
Member 
 
Registered: 20th Mar 00
 
User status: Offline 
 
 | 
 
Nope, just moved from Backup Ex 10D and 12.5 to Attix5. 
 
Pretty good.  It only uses a tiny portion of your phone line, so if your only running say half meg lines to branches, they can continue to upload information to HQ whilst running the backup without really effecting performance.
 | 
Aaron 
Member 
 
Registered: 9th Aug 04
 Location: Cottingham, East Riding 
User status: Offline 
 
 | 
 
SonicWall CDP FTW
 | 
John 
Member 
 
Registered: 30th Jun 03
 
User status: Offline 
 
 | 
 
Any new stuff uses in file delta now minimising data transfer.
 | 
Root 
Member 
 
Registered: 28th Dec 08
 
User status: Offline 
 
 | 
 
you could block the port, it's not fixing the problem properly, but it'll do the job?
 | 
VrsTurbo 
Premium Member 
 
Registered: 8th Jun 10
 
User status: Offline 
 
 | 
 
how much you paying per meg of storage for attix? 
 |