Gmail Suddenly Connects To 30 Ports On My Machine!

One personal machine I have is a 32 bit Windows XP Pro Machine. It still works fine.

With it, I open up Safari. One browser, and one window only. Check gmail. Logout.

Then, I open up a DOS/CMD window and run netstat.


netstat -ab

TCP blue:1423 ESTABLISHED 2684

TCP blue:1393 TIME_WAIT 0
TCP blue:1394 TIME_WAIT 0
TCP blue:1395 TIME_WAIT 0
TCP blue:1396 TIME_WAIT 0
TCP blue:1397 TIME_WAIT 0
TCP blue:1398 TIME_WAIT 0
TCP blue:1399 TIME_WAIT 0
TCP blue:1400 TIME_WAIT 0
TCP blue:1401 TIME_WAIT 0
TCP blue:1402 TIME_WAIT 0
TCP blue:1403 TIME_WAIT 0
TCP blue:1404 TIME_WAIT 0
TCP blue:1405 TIME_WAIT 0
TCP blue:1406 TIME_WAIT 0
TCP blue:1407 TIME_WAIT 0
TCP blue:1408 TIME_WAIT 0
TCP blue:1409 TIME_WAIT 0
TCP blue:1410 TIME_WAIT 0
TCP blue:1411 TIME_WAIT 0
TCP blue:1413 TIME_WAIT 0
TCP blue:1414 TIME_WAIT 0
TCP blue:1416 TIME_WAIT 0
TCP blue:1417 TIME_WAIT 0
TCP blue:1418 TIME_WAIT 0
TCP blue:1419 TIME_WAIT 0
TCP blue:1420 TIME_WAIT 0
TCP blue:1421 TIME_WAIT 0
TCP blue:1424 TIME_WAIT 0
TCP blue:1426 TIME_WAIT 0
TCP blue:2869 .:54497 TIME_WAIT 0
TCP blue:6591 .:http TIME_WAIT 0
TCP blue:17987 .:http TIME_WAIT 0
TCP blue:23244 .:http TIME_WAIT 0
TCP blue:54473 .:http TIME_WAIT 0
TCP blue:echo blue:0 LISTENING 1296


Wow! Look at all the network connections. If you count “HTTP”, google created 30 HTTP connections!

—— is google, also known as:

$ whois

Whois Server Version 2.0

Domain Name: 1E100.NET
Whois Server:
Referral URL:
Name Server: NS1.GOOGLE.COM
Name Server: NS2.GOOGLE.COM
Name Server: NS3.GOOGLE.COM
Name Server: NS4.GOOGLE.COM
Status: clientDeleteProhibited
Status: clientRenewProhibited
Status: clientTransferProhibited
Status: clientUpdateProhibited
Status: serverDeleteProhibited
Status: serverTransferProhibited
Status: serverUpdateProhibited
Updated Date: 15-sep-2010
Creation Date: 25-sep-2009
Expiration Date: 25-sep-2019

DNS Admin
Google Inc.
1600 Amphitheatre Parkway
Mountain View CA 94043
US +1.6502530000 Fax: +1.6506188571

Domain Name:
Registrar Name:
Registrar Whois:
Registrar Homepage:

MarkMonitor is the Global Leader in Enterprise Brand Protection.

Domain Management
MarkMonitor Brand Protectionâ,¢
AntiFraud Solutions
Corporate Consulting Services

Visit MarkMonitor at
Contact us at 1 800 745 9229
In Europe, at +44 (0) 20 7840 1300


Some of the output with more self explanatory names are:

But what are all the other servers, with the funny names? Some servers such as, connects to multiple ports. Here: 1403, 1404, 1405. Why?


It’s not just the Safari browser, it is also tcpsvcs.exe. Which is:
TCP/IP Services Application


Google says that it will change it’s privacy policy on March 1st (?). Saying they will gather even more information from us and link it all together. If it’s this bad already ….

I’d noted in an earlier post about all the CPU activity that Gmail did.

Just what information is Google getting from me? What are they doing with it?

Why do they need 30 HTTP connections to my desktop? And multiple connections to the same server?

Why so much network activity? Why so much of my own machine’s CPU power being used?

Does anyone know? Please leave a comment.

Leave a Reply

Please log in using one of these methods to post your comment: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: