Port 1025

[AAP-IT]

Some service seems to be listening on WinXP machines. netstat says it's
svchost.exe. Is there a way to find out which service this is? Is this
usual?

Thanks,
AAP-IT

[Kent W. England [MVP]]

This is normal. Port 1025 is the first dynamic port. The first process
to ask for a
dynamically assigned port to listen on will be granted port 1025. That
is usually Task Scheduler, but if Task Scheduler is disabled, the next
process will get port 1025.

--
Kent W. England, Microsoft MVP for Windows



"AAP-IT" > wrote in
message ...

> Some service seems to be listening on WinXP machines. netstat says
> it's
> svchost.exe. Is there a way to find out which service this is? Is this
> usual?

[Kirk Soluk [MSFT]]

This is normal since the first RPC app that starts up and requests a
(randomly allocated) port will get 1025, the next one 1026 and so on. When
the port is allocated to the svchost.exe process there is no easy way to
tell what service inside svchost.exe is using it. You could try to narrow
it down if you want by using TASKLIST /SVC then maybe stopping \starting
services etc.