netstat on my server

A netstat on my MSSQL server shows
TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2060 ESTABLISHED
TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2114 ESTABLISHED
TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com.com:2195 ESTABLISHED
TCP MSSQL12:ms-sql-s c2-asp9.mydomain.com:2215 ESTABLISHED
TCP MSSQL12:ms-sql-s wsp05956800wss.cr.net.cable.rogers.com:3063
ESTABLISHED
TCP MSSQL12:ms-sql-s mailserver.uslive.net:1972 ESTABLISHED
I know the first four connections are servers on my domain, with asp pages
connecting to the DB. The other too I dont know what those are. Does that
mean that some other sites are connecting to my server as well? If so how
can I tell what they are accessing? And how can I stop them? Thses are just
some of the connections in netstat, what else should I be looking for and
what ports should I block for security?
Im new to MSSQL so any help or links would be appreciated.
Thank youhi,
more over run ping ,nslookup and tracert command to see what it returns ,
it will help full to isolate it more , is mailserver.uslive.net is a
mailserver for you ?! have you configure your SQL box for sendmail or any
such application.
:-)
Regards
--
Andy Davis
Activecrypt Team
---
SQL Server Encryption Software
http://www.activecrypt.com
"rvegas@.rogers.com" wrote:

> A netstat on my MSSQL server shows
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2060 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2114 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com.com:2195 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp9.mydomain.com:2215 ESTABLISHED
> TCP MSSQL12:ms-sql-s wsp05956800wss.cr.net.cable.rogers.com:3063
> ESTABLISHED
> TCP MSSQL12:ms-sql-s mailserver.uslive.net:1972 ESTABLISHED
> I know the first four connections are servers on my domain, with asp pages
> connecting to the DB. The other too I dont know what those are. Does that
> mean that some other sites are connecting to my server as well? If so how
> can I tell what they are accessing? And how can I stop them? Thses are jus
t
> some of the connections in netstat, what else should I be looking for and
> what ports should I block for security?
> Im new to MSSQL so any help or links would be appreciated.
> Thank you
>
>|||Hi ,
is their any Internet connection running on your server ?! or Router ? is
your Web Application is allowed to access outside network ?! it clearly show
s
* wsp05956800wss.cr.net.cable.rogers.com:3063 ESTABLISHED * , which means
the Internet Connection is their which enale it to access outside local
domain too
* TCP MSSQL12:ms-sql-s mailserver.uslive.net:1972 ESTABLISHED * ,
this is a tcp port 1972 accessing your sql , if you have set some send mail
or any application like this .
more over ask your network team . and see SQL LOG for any activity logged
from this network and hey dont missed to read event log of Windows and
configure C2 Audit.
:-)
Regards
Andy Davis
Activecrypt Team
---
SQL Server Encryption Software
http://www.activecrypt.com
"rvegas@.rogers.com" wrote:

> A netstat on my MSSQL server shows
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2060 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2114 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com.com:2195 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp9.mydomain.com:2215 ESTABLISHED
> TCP MSSQL12:ms-sql-s wsp05956800wss.cr.net.cable.rogers.com:3063
> ESTABLISHED
> TCP MSSQL12:ms-sql-s mailserver.uslive.net:1972 ESTABLISHED
> I know the first four connections are servers on my domain, with asp pages
> connecting to the DB. The other too I dont know what those are. Does that
> mean that some other sites are connecting to my server as well? If so how
> can I tell what they are accessing? And how can I stop them? Thses are jus
t
> some of the connections in netstat, what else should I be looking for and
> what ports should I block for security?
> Im new to MSSQL so any help or links would be appreciated.
> Thank you
>
>|||since your email is @.rogers.net i would get that one connection is you, as
for the other is your sql server sending notifications ?
<rvegas@.rogers.com> wrote in message
news:e6QXqFcAGHA.216@.TK2MSFTNGP15.phx.gbl...
>A netstat on my MSSQL server shows
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2060 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2114 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com.com:2195 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp9.mydomain.com:2215 ESTABLISHED
> TCP MSSQL12:ms-sql-s wsp05956800wss.cr.net.cable.rogers.com:3063
> ESTABLISHED
> TCP MSSQL12:ms-sql-s mailserver.uslive.net:1972 ESTABLISHED
> I know the first four connections are servers on my domain, with asp pages
> connecting to the DB. The other too I dont know what those are. Does that
> mean that some other sites are connecting to my server as well? If so how
> can I tell what they are accessing? And how can I stop them? Thses are
> just some of the connections in netstat, what else should I be looking for
> and what ports should I block for security?
> Im new to MSSQL so any help or links would be appreciated.
> Thank you
>|||Actually yes my server has a vb script that sends out emails.
Basically i want to know who is connecting to my server, and what they are
using.
My server is consuming a lot of ram and i want to find out why? maybe its
sites not releasing connections. How can i find this out?
Thanx
"David J. Cartwright" <davidcartwright@.hotmail.com> wrote in message
news:euohWjlAGHA.436@.TK2MSFTNGP10.phx.gbl...
> since your email is @.rogers.net i would get that one connection is you, as
> for the other is your sql server sending notifications ?
> <rvegas@.rogers.com> wrote in message
> news:e6QXqFcAGHA.216@.TK2MSFTNGP15.phx.gbl...
>|||you can use taskman to view what procs are using what memory.
also the current activity tab in EM will give you connection info.
PerfMon can aslo be used.
<rvegas@.rogers.com> wrote in message
news:OmOmw6mAGHA.3936@.TK2MSFTNGP12.phx.gbl...
> Actually yes my server has a vb script that sends out emails.
> Basically i want to know who is connecting to my server, and what they are
> using.
> My server is consuming a lot of ram and i want to find out why? maybe its
> sites not releasing connections. How can i find this out?
> Thanx
> "David J. Cartwright" <davidcartwright@.hotmail.com> wrote in message
> news:euohWjlAGHA.436@.TK2MSFTNGP10.phx.gbl...
>|||Hi,
the best thing is to check with SQL Profiler .
:-)
Regards
--
Andy Davis
Activecrypt Team
---
SQL Server Encryption Software
http://www.activecrypt.com
"David J. Cartwright" wrote:

> you can use taskman to view what procs are using what memory.
> also the current activity tab in EM will give you connection info.
> PerfMon can aslo be used.
> <rvegas@.rogers.com> wrote in message
> news:OmOmw6mAGHA.3936@.TK2MSFTNGP12.phx.gbl...
>
>|||I have no RAM left on the server. Every time i logon and try anything the
server hanngs and needs to be rebooted.
The server has 2GB RAM and all is used up, so i need a way to figure which
domain is taking up all the ram.
Taskmanager shows sqlservr.exe taking up the ram.
I know i need to add ram, but first i want to make sure no users are abusing
the server.
"Andy Davis" <activecrypt@.gmail.com> wrote in message
news:D6BAD1B0-3550-4423-BB49-4EA2383EA093@.microsoft.com...[vbcol=seagreen]
> Hi,
> the best thing is to check with SQL Profiler .
> :-)
> Regards
> --
> Andy Davis
> Activecrypt Team
> ---
> SQL Server Encryption Software
> http://www.activecrypt.com
>
> "David J. Cartwright" wrote:
>|||you can restrict how much memery sql uses
<rvegas@.rogers.com> wrote in message
news:OyHnrPaBGHA.1312@.TK2MSFTNGP09.phx.gbl...
>I have no RAM left on the server. Every time i logon and try anything the
>server hanngs and needs to be rebooted.
> The server has 2GB RAM and all is used up, so i need a way to figure which
> domain is taking up all the ram.
> Taskmanager shows sqlservr.exe taking up the ram.
> I know i need to add ram, but first i want to make sure no users are
> abusing the server.
> "Andy Davis" <activecrypt@.gmail.com> wrote in message
> news:D6BAD1B0-3550-4423-BB49-4EA2383EA093@.microsoft.com...
>|||Hi,
nope it is not the solution , have you check EP for correct INDEX seeking !
statistics are all updated , index is defreged ! on top of all is your
application have complex calulation ?!

> The server has 2GB RAM and all is used up, so i need a way to figure which
> domain is taking up all the ram.
> Taskmanager shows sqlservr.exe taking up the ram.
> I know i need to add ram, but first i want to make sure no users are
> abusing the server.
-- IT SHOWS THAT YOUR SQL SERVER IS WITH IIS , RIGHT ?! I WOULD SUGGEST YOU
THAT CHOOSE RAID1 FOR OS AND RAID 5 OR RAID 10 (DEPENDS UPON READ / WRITE IS
MORE) BASED ON HOW YOUR APPLICATION WORKS (READ / WRITE MORE) .
ONE MORE THING , MAY BE YOU KNOW BUT IF YOU ARE USING STANDARD EDITION YOU
CAN NOT USE MORE THAN 2 GB OF RAM , YOU HAVE TO HAVE ENTERPRISE / DEV EDITIO
N
TO USE MORE THAN 2 GB OF RAM . READ MAXIMUM CAPICITY SPECIFICATION IN BOL
FOR MORE.
HTH
:-)
Regards
Andy Davis
Activecrypt Team
---
SQL Server Encryption Software
http://www.activecrypt.com
"David J. Cartwright" wrote:

> you can restrict how much memery sql uses
> <rvegas@.rogers.com> wrote in message
> news:OyHnrPaBGHA.1312@.TK2MSFTNGP09.phx.gbl...
>
>