 |
 | Home | Contact Us | FAQ | Search & Site Map | Link to Us |
 | Sign In | Join | Other 45 Sites in Network |
SQL Server Forum / General / Security / December 2005netstat on my server
A netstat on my MSSQL server shows TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2060 ESTABLISHED TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2114 ESTABLISHED TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com.com:2195 ESTABLISHED TCP MSSQL12:ms-sql-s c2-asp9.mydomain.com:2215 ESTABLISHED TCP MSSQL12:ms-sql-s wsp05956800wss.cr.net.cable.rogers.com:3063 ESTABLISHED TCP MSSQL12:ms-sql-s mailserver.uslive.net:1972 ESTABLISHED I know the first four connections are servers on my domain, with asp pages connecting to the DB. The other too I dont know what those are. Does that mean that some other sites are connecting to my server as well? If so how can I tell what they are accessing? And how can I stop them? Thses are just some of the connections in netstat, what else should I be looking for and what ports should I block for security? Im new to MSSQL so any help or links would be appreciated. Thank you hi, more over run ping ,nslookup and tracert command to see what it returns , it will help full to isolate it more , is mailserver.uslive.net is a mailserver for you ?! have you configure your SQL box for sendmail or any such application. :-) Regards  SignatureAndy Davis Activecrypt Team -------------------------------------------- SQL Server Encryption Software http://www.activecrypt.com > A netstat on my MSSQL server shows > TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2060 ESTABLISHED [quoted text clipped - 14 lines] > > Thank you Hi , is their any Internet connection running on your server ?! or Router ? is your Web Application is allowed to access outside network ?! it clearly shows * wsp05956800wss.cr.net.cable.rogers.com:3063 ESTABLISHED * , which means the Internet Connection is their which enale it to access outside local domain too * TCP MSSQL12:ms-sql-s mailserver.uslive.net:1972 ESTABLISHED * , this is a tcp port 1972 accessing your sql , if you have set some send mail or any application like this . more over ask your network team . and see SQL LOG for any activity logged from this network and hey dont missed to read event log of Windows and configure C2 Audit. :-) Regards SignatureAndy Davis Activecrypt Team -------------------------------------------- SQL Server Encryption Software http://www.activecrypt.com > A netstat on my MSSQL server shows > TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2060 ESTABLISHED [quoted text clipped - 14 lines] > > Thank you since your email is @rogers.net i would get that one connection is you, as for the other is your sql server sending notifications ? >A netstat on my MSSQL server shows > TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2060 ESTABLISHED [quoted text clipped - 14 lines] > > Thank you Actually yes my server has a vb script that sends out emails. Basically i want to know who is connecting to my server, and what they are using. My server is consuming a lot of ram and i want to find out why? maybe its sites not releasing connections. How can i find this out? Thanx > since your email is @rogers.net i would get that one connection is you, as > for the other is your sql server sending notifications ? [quoted text clipped - 17 lines] >> >> Thank you you can use taskman to view what procs are using what memory. also the current activity tab in EM will give you connection info. PerfMon can aslo be used. > Actually yes my server has a vb script that sends out emails. > [quoted text clipped - 26 lines] >>> >>> Thank you Hi, the best thing is to check with SQL Profiler . :-) Regards SignatureAndy Davis Activecrypt Team -------------------------------------------- SQL Server Encryption Software http://www.activecrypt.com > you can use taskman to view what procs are using what memory. > [quoted text clipped - 32 lines] > >>> > >>> Thank you I have no RAM left on the server. Every time i logon and try anything the server hanngs and needs to be rebooted. The server has 2GB RAM and all is used up, so i need a way to figure which domain is taking up all the ram. Taskmanager shows sqlservr.exe taking up the ram. I know i need to add ram, but first i want to make sure no users are abusing the server. > Hi, > the best thing is to check with SQL Profiler . [quoted text clipped - 43 lines] >> >>> >> >>> Thank you you can restrict how much memery sql uses >I have no RAM left on the server. Every time i logon and try anything the >server hanngs and needs to be rebooted. [quoted text clipped - 53 lines] >>> >>> >>> >>> Thank you Hi, nope it is not the solution , have you check EP for correct INDEX seeking ! statistics are all updated , index is defreged ! on top of all is your application have complex calulation ?! > The server has 2GB RAM and all is used up, so i need a way to figure which > domain is taking up all the ram. > Taskmanager shows sqlservr.exe taking up the ram. > I know i need to add ram, but first i want to make sure no users are > abusing the server. --- IT SHOWS THAT YOUR SQL SERVER IS WITH IIS , RIGHT ?! I WOULD SUGGEST YOU THAT CHOOSE RAID1 FOR OS AND RAID 5 OR RAID 10 (DEPENDS UPON READ / WRITE IS MORE) BASED ON HOW YOUR APPLICATION WORKS (READ / WRITE MORE) . ONE MORE THING , MAY BE YOU KNOW BUT IF YOU ARE USING STANDARD EDITION YOU CAN NOT USE MORE THAN 2 GB OF RAM , YOU HAVE TO HAVE ENTERPRISE / DEV EDITION TO USE MORE THAN 2 GB OF RAM . READ MAXIMUM CAPICITY SPECIFICATION IN BOL FOR MORE. HTH :-) Regards SignatureAndy Davis Activecrypt Team -------------------------------------------- SQL Server Encryption Software http://www.activecrypt.com > you can restrict how much memery sql uses > [quoted text clipped - 55 lines] > >>> >>> > >>> >>> Thank you how do i check what editon of SQL i have? I just noticed that i have more than 5 connections to the same IP on port 1433 when i run netstat. Should i be worried about that? Thanx > Hi, > nope it is not the solution , have you check EP for correct INDEX seeking [quoted text clipped - 93 lines] >> >>> >>> >> >>> >>> Thank you Hi, run this in QA : SELECT CONVERT(char(20), SERVERPROPERTY('servername')) SELECT CONVERT(char(20), SERVERPROPERTY('NumLicenses')) SELECT CONVERT(char(20), SERVERPROPERTY('LicenseType')) SELECT CONVERT(char(20), SERVERPROPERTY('productversion')) SELECT CONVERT(char(20), SERVERPROPERTY('productlevel')) SELECT CONVERT(char(20), SERVERPROPERTY('Engine Edition')) SELECT CONVERT(char(20), SERVERPROPERTY('Edition')) as far as those application accessing yr server are authorised by you and not from anonymous don't worry but plz use firewall tooo. HTH SignatureAndy Davis Activecrypt Team -------------------------------------------- SQL Server Encryption Software http://www.activecrypt.com > how do i check what editon of SQL i have? > I just noticed that i have more than 5 connections to the same IP on port [quoted text clipped - 97 lines] > >> >>> >>> > >> >>> >>> Thank you Thanx Andy. Yeah i have a linux firewall. Thats why i need to know what to look for in netstat, so i can block these on the firewall. My server needs to be accessed externally, through asp pages and enterprise manager, so i cant block port 1433. What im trying to do is find a way in netstat to find out if there are too many of a specific connection to my server. Then block that on the firewall. > Hi, > run this in QA : [quoted text clipped - 124 lines] >> >> >>> >>> >> >> >>> >>> Thank you I have enterprise on my machine, so i guess i can upgrade to 4 GB ram. > Hi, > run this in QA : [quoted text clipped - 124 lines] >> >> >>> >>> >> >> >>> >>> Thank you |
Reply to this Message |
 Sign In
 Join
 My Latest Posts My Monitored Threads My Blog My Photo Gallery My Profile My Homepage Start New Thread Enable EMail Alerts Rate this Thread
|
©2009 Advenet LLC Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.