Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Connection Log, need some help interpreting these things RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote


    Howdy,

    I just went to read the text file of the connection log.

    Could someone tell me what the following means ?

    I replaced my IP server address by IP-adress-server and my local PC address wiht IP-address-local_client.  (probably you will laugh at this attempt to shiel my ip from the world :-))

    It looks like my Server is doing something with IP address 65.54.81.165 ?


    2008-04-17 15:23:07 OPEN TCP IP-address-server 65.54.81.165 1068 80 - - - - - - - - -
    2008-04-17 15:23:17 CLOSE TCP IP-address-server 65.54.81.165 1068 80 - - - - - - - - -
    2008-04-17 15:23:17 OPEN TCP IP-address-server 65.54.81.165 1069 80 - - - - - - - - -
    2008-04-17 15:23:24 CLOSE TCP IP-address-server 65.54.81.165 1069 80 - - - - - - - - -
    2008-04-17 15:23:26 OPEN TCP IP-address-server 65.54.81.165 1070 80 - - - - - - - - -
    2008-04-17 15:23:32 CLOSE TCP IP-address-server 65.54.81.165 1070 80 - - - - - - - - -
    2008-04-17 15:23:32 OPEN TCP IP-address-server 65.54.81.165 1071 80 - - - - - - - - -
    2008-04-17 15:23:38 CLOSE TCP IP-address-server 65.54.81.165 1071 80 - - - - - - - - -
    2008-04-17 15:23:38 OPEN TCP IP-address-server 65.54.81.165 1072 80 - - - - - - - - -
    2008-04-17 15:23:45 CLOSE TCP IP-address-server 65.54.81.165 1072 80 - - - - - - - - -
    2008-04-17 15:23:45 OPEN TCP IP-address-server 65.54.81.165 1073 80 - - - - - - - - -
    2008-04-17 15:23:59 CLOSE TCP IP-address-server 65.54.81.165 1073 80 - - - - - - - - -
    2008-04-17 15:23:59 OPEN TCP IP-address-server 65.54.81.165 1074 80 - - - - - - - - -
    2008-04-17 15:24:28 CLOSE TCP IP-address-server 65.54.81.165 1074 80 - - - - - - - - -
    2008-04-17 15:24:28 OPEN TCP IP-address-server 65.54.81.165 1075 80 - - - - - - - - -
    2008-04-17 15:24:34 CLOSE TCP IP-address-server 65.54.81.165 1075 80 - - - - - - - - -
    2008-04-17 15:24:39 OPEN TCP IP-address-server 65.54.81.165 1076 80 - - - - - - - - -
    2008-04-17 15:24:50 CLOSE TCP IP-address-server 65.54.81.165 1076 80 - - - - - - - - -
    2008-04-17 15:24:50 OPEN TCP IP-address-server 65.54.81.165 1077 80 - - - - - - - - -
    2008-04-17 15:25:00 CLOSE TCP IP-address-server 65.54.81.165 1077 80 - - - - - - - - -
    2008-04-17 15:25:00 OPEN TCP IP-address-server 65.54.81.165 1078 80 - - - - - - - - -
    2008-04-17 15:25:04 CLOSE TCP IP-address-server 65.54.81.165 1078 80 - - - - - - - - -
    2008-04-17 15:25:04 OPEN TCP IP-address-server 65.54.81.165 1079 80 - - - - - - - - -
    2008-04-17 15:25:18 CLOSE TCP IP-address-server 65.54.81.165 1079 80 - - - - - - - - -
    2008-04-17 15:25:18 OPEN TCP IP-address-server 65.54.81.165 1080 80 - - - - - - - - -
    2008-04-17 15:25:42 CLOSE TCP IP-address-server 65.54.81.165 1080 80 - - - - - - - - -
    2008-04-17 15:25:42 OPEN TCP IP-address-server 65.54.81.165 1081 80 - - - - - - - - -
    2008-04-17 15:27:55 CLOSE TCP IP-address-server 65.54.81.165 1081 80 - - - - - - - - -
    2008-04-18 10:42:22 OPEN-INBOUND TCP IP-address-local_client IP-address-server 64108 3389 - - - - - - - - -
    2008-04-18 10:42:23 CLOSE TCP IP-address-server IP-address-local_client 3389 64108 - - - - - - - - -
    2008-04-18 10:42:27 OPEN-INBOUND TCP IP-address-local_client IP-address-server 64109 3389 - - - - - - - - -
    Sunday, April 20, 2008 12:16 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Probably:

     

     T. Headrick wrote:

    ..... if you have enabled the "Customer Experience Improvement" option under Settings - General then there are certain tasks that send anonymous data back to Microsoft that a user was doing a certain task.  The CEI program data is very useful for the product team to understand what parts of the product people use and how often - it helps the UX and UA teams to refine and improve the product over time.

     

    From the post of Todd Headrick in Re: Why does WHS phone home to microsoft when you try to restore a file from a backup?

    Sunday, April 20, 2008 4:28 PM
    Moderator

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    So, I figured out the IP address:
    OrgName:    Microsoft Corp 
    OrgID:      MSFT
    Address:    One Microsoft Way
    City:       Redmond
    StateProv:  WA
    PostalCode: 98052
    Country:    US

    NetRange:   65.52.0.0 - 65.55.255.255

    Question hence is why is my Server doing what it does  ?



    Sunday, April 20, 2008 1:17 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Probably:

     

     T. Headrick wrote:

    ..... if you have enabled the "Customer Experience Improvement" option under Settings - General then there are certain tasks that send anonymous data back to Microsoft that a user was doing a certain task.  The CEI program data is very useful for the product team to understand what parts of the product people use and how often - it helps the UX and UA teams to refine and improve the product over time.

     

    From the post of Todd Headrick in Re: Why does WHS phone home to microsoft when you try to restore a file from a backup?

    Sunday, April 20, 2008 4:28 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Well I havent got the Experience program enabled... but I did read that ET has a tendancy to phone home in the thread you added.

    Typical



    Sunday, April 20, 2008 4:57 PM