Re: RE: a tool like nestat

[ttate () ctscorp com]

A good port monitoring tool can be found at: 
http://www.download.com/3000-2085-10062969.html?part=65960&subj=dlpage&tag=button 
 
It's called ActivePorts.

> > > "Hamish Stanaway" <koremeltdown () hotmail com> 09/09/04 02:50AM >>>
Hi there,

Netstat -bvan does not work for me. Netstat -van does however, so maybe 
there is no -b switch on XP Pro? The method I was talking about you take the 
PID from netstat and run it against task, and it tells you the application 
for that particular PID.
I would love to learn a new way of how to do this though :)



Kindest of regards,

Hamish Stanaway, CEO

Absolute Web Hosting / -= KoRe WoRkS =- Internet Security
Auckland, New Zealand

http://www.webhosting.net.nz
http://www.buywebhosting.co.nz
http://www.koreworks.com





> From: jwichman () new rr com
> Reply-To: jwichman () new rr com
> To: Hamish Stanaway <koremeltdown () hotmail com>
> CC: juanbabi () yahoo com, security-basics () securityfocus com
> Subject: Re: RE: a tool like nestat
> Date: Sun, 05 Sep 2004 03:26:41 -0500

> I believe you're looking for netstat -bvan
>
> netstat /? will give more information.... that is if you're using a XP box. 
>  Otherwise I normally use a program from systernals.com to get the 
> details... can't think of the program name off the top of my head though.
>
>
>
> ----- Original Message -----
> From: Hamish Stanaway <koremeltdown () hotmail com>
> Date: Wednesday, September 1, 2004 4:29 am
> Subject: RE: a tool like nestat
>
> > Hi there Juan,
> >
> > What version of windows are you using (I presume you are using
> > windows as
> > you refer to netstat)?
> > It is possible to track what application is using what port using
> > the
> > process number, all doable via a standard XP box in DOS.
> > If you are more interested, let me know and I will find the thread
> > (which
> > admittedly is around a year old now) which refers to how to do this.
> >
> >
> > Kindest of regards,
> >
> > Hamish Stanaway, CEO
> >
> > Absolute Web Hosting / -= KoRe WoRkS =- Internet Security
> > Auckland, New Zealand
> >
> > http://www.webhosting.net.nz
> > http://www.buywebhosting.co.nz
> > http://www.koreworks.com

---------------------------------------------------------------------------
Computer Forensics Training at the InfoSec Institute. All of our class sizes
are guaranteed to be 12 students or less to facilitate one-on-one
interaction with one of our expert instructors. Gain the in-demand skills of
a certified computer examiner, learn to recover trace data left behind by
fraud, theft, and cybercrime perpetrators. Discover the source of computer
crime and abuse so that it never happens again.

http://www.infosecinstitute.com/courses/computer_forensics_training.html
----------------------------------------------------------------------------