Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My DDWRT router is showing that my computer has a connection count around 600! The router is at 100% CPU use. How can I see what's making all the connections?

So far, I've opened up Resource Monitor and checked the network tab. I can sort by which program is using the most network bandwidth (Pale Moon browser), but I can't see what's making all of the connections. Or rather, where all the connections are being toward (trying to find what tab must be making all of these connections).

I've also tried netstat -A, but it apparently doesn't show the actual number of connections being made. At least, the list of established connections isn't very long, by any means (like enough to account for the 500+ connections apparently being made.

share|improve this question
Some like Wireshark should be able to help. – Karan Nov 10 '12 at 14:06
Sounds like malware at work to me. – Moab Nov 10 '12 at 15:44
Uh oh -- I think I might know what it might be. I have a browser open with 100-150 tabs (that's not a typo). My thought was that after letting the browser sit unused for a couple hours, it shouldn't be making/having any connections open, as pages aren't being loaded. BUT, now I'm wondering if it could be that a smattering of webpages have AJAX all over the place, keeping a smorgasbord of "live" connections open... ? – Coldblackice Nov 12 '12 at 7:53
I suppose a test is in order -- killing the browser, waiting a bit, and seeing if those connections drop to oblivion. Or perhaps disabling javascript in the browser, and likewise seeing if the connections drop out (while still having all the tabs open). And yet another test, using an extension for Firefox called Bartab that automatically unloads unused pages after a set amount of time. – Coldblackice Nov 12 '12 at 7:55
up vote 1 down vote accepted

You could try CurrPorts network monitoring software. It list of all currently opened TCP/IP and UDP ports:



You might need to run CurrPorts with administrator privileges to get accurate process names.

share|improve this answer
I'll check it out -- thanks! – Coldblackice Nov 12 '12 at 7:34

Agree with David L., CurrPorts is rather useful tool. I also use TCPView from sysinternals.

Wireshark and Microsoft Network Monitor are more advanced tool, but also provide this info.

Do you have utorrent running in the background? If Yes - then limit the max number of simultaneous connections allowed.

share|improve this answer
I do have utorrent running in the background, but without any torrents downloading. (And with none running for at least over an hour or two, to rule out the lingering connections from a torrent). – Coldblackice Nov 12 '12 at 7:51

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.