local address 0.0.0.0

[RobertoNemo]

Getting acquainted with NetStat--which I recommend to anyone interested in learning more about internet security and/or TCP/IP. (All Windoze users have NetStat which runs in DOS or from the command prompt in NT/W2k.)

The first local addesses listed are 0.0.0.0, which I believe are used by the LAN, ICS and/or NAT (the latter which, unless set up by my firewall, I do not believe I have and so assume were established by ICS or my LAN).

The foreign address listed for each of them is also 0.0.0.0 and their status is shown to be 'listening'.

Can anyone shed GENERAL light on local addresses 0.0.0.0 and any related security risk from hackers or via trojans?

TIA :confused: :confused: :confused:

[tekelberry]

127.0.0.1 is the local address

[g-c0de]

lol yeah i knew it was 127.0.0.1, im like where did he get 0.0.0.0 from

[RobertoNemo]

If you go into a DOS window, or the Commmand Prompt if you use NT/W2k, and run netstat, you will see what I am talking about.

BTW, I do not use 127.0.0.1 as my computer's IP address. I use 192.168.0.1.

Is there anyone out there that knows what 0.0.0.0 is being used for? I reckon it is either ICS, F&P sharing, or something to do with the LAN, but would like to have some knowledgeable advice on this. thanks

[g-c0de]

On many systems, 0.0.0.0 works like 127.0.0.1. It is a loopback IP address and means "this host".

[g-c0de]

oh yeah 0.0.0.0 is reserved for the default network, its in the subetting subject

[RobertoNemo]

Ah, we seem to be making progress now, though I don't quite understand "its in the subetting subject". I am not very advanced technically, so if I could ask the two of you to give me a bit of explanation, in as plain english as you can, as to how 0.0.0.0 gets established and what it means that 0.0.0.0 is shown both as the local address and the foreign address by NetStat? What is happening and what is being accomplished?
thanks :)

[Zero_Satisfaction]

Proto Local Address Foreign Address State
TCP xx.xx.xx.xx:139 0.0.0.0:0 LISTENING

It shows "0.0.0.0" because it is Listening/Waiting for a connection. There is no current connection. Stop being so paranoid. :P

*** Looking up 127.0.0.1
*** Resolved 127.0.0.1 to LOCALHOST
*** Looking up 0.0.0.0
*** Resolved 0.0.0.0 to LOCALHOST

[tomsykes]

default route :p

[BaphometaS]

...What does it mean when your netstat fills up with :

loaclhost 0.0.0.0:0 Foreign IP 0.0.0.0:0 LISTENING

..at this point I can ping 127.0.0.1, but nothing else,

..if I try and release all and renew it gives me

error releasing adapter 10055 I cannot surf or ping until I reboot then all is well for bout two hours of steady surfin then all over again!

Any help would be appreciated!