Windows IT Pro is the leading independent community for IT professionals deploying Microsoft Windows server and client applications and technologies.
  
  
  Advanced Search 


October 13, 2003

11 Port Enumerators

Catch malware!
RSS
View this exclusive article with VIP access -- click here to join |
See More Products / Software Articles Here | Reprints | Or sign up for our VIP Monthly Pass!
SideBar    Trojan-Horse Port Resources, UDP vs. TCP, The Art of Interpreting Netstat

Port Explorer provides real-time port-traffic updates, but you can instruct Port Explorer to pause so that the view is static. Also, the tool saves all activity to a local file that you can view from the GUI. I placed Port Explorer under a heavy load that would typically cause Netstat to slow to a crawl or die, and without hesitation, Port Explorer showed every port as it started up.

Port Explorer's GUI and operations are customizable. You can instruct Port Explorer to show you the filename or the full file path of the program that owns the port. The latter option is beneficial if you're trying to ferret out an evasive program. The main screen contains several columns of information that you can sort with a mouse click at the top of the sort column, and you can drag and drop columns to different areas of the screen without stopping the program. Tabs across the top of the main screen provide several methods for viewing activity. You can customize colors, refresh rates, and even the language. Port Explorer offers eight language choices—it's the only port enumerator to do so besides Netstat. The tool can also display network statistics. . . .


Already a VIP member?
Please log on to view the full article

Why become a VIP member?

VIP-only online access
VIP CD delivered twice a year: offline access to the entire Windows IT Pro article library
Monthly issue of your choice of Windows IT Pro or SQL Server Magazine

Subscribe Now
Reader Comments
Brilliant. So many articles gloss over tools such as netstat assuming everyone was born sporting a pocket protector. One of the better articles I have read since I can remember. You should do a whole series on network troubleshooting utilities including tracert and nslookup. Well done.

Glen Huey October 22, 2003


Very good research and experience blended to make a quality article. Toast for more to come from the author and windows & .net mag website. Cheers!

Rostand Abear October 22, 2003


Great article, I only wish you could have provided links to the programs

Howard Mirkin October 22, 2003


Very interesting and well written article. I think the utilities you analize are usefull not only for suspicious "Virus" or "Trojan Horse" problems but are great helps for developers of TCP Network Application Programs. Thanks

Luigi Calegari October 24, 2003


I have Windows 2000 (SP4) and the netstat command doesn't have the -o option to enumerate the process identifier (PID). Is there another command that does so, perhaps in the Resource Kit, or perhaps this feature is only included with Windows XP and I have to find a 3rd party tool?

C. Frank Bernard October 28, 2003


I want to thank you for this well written article. I am new to network security issues and am having difficulty understanding much of what I've been reading. Not so with Mr. Grimes' "11 Port Enumerators" article. The topic at large still carries a huge mystery for me to unravel but Mr. Grimes has given me hope that I'll be able to grasp this information some time soon.

I've stumbled here from WildersSecuity's forum and plan on spending some time on your site.

I cannot thank you enough,
Kim Palmer
Newly drafted, reluctant though sober, Network Security Administrator
God help us. :)

Kim Palmer March 19, 2004


The Best of the best utility of this category is missing:
NirSoft CurrPorts !

http://nirsoft.mirrorz.com/

CurrPorts displays the list of all currently opened TCP/IP and UDP ports on your local computer. For each port in the list, information about the process that opened the port is also displayed, including the process name, full path of the process, version information of the process (product name, file description, and so on), the time that the process was created, and the user that created it.
In addition, CurrPorts allows you to close unwanted TCP connections, kill the process that opened the ports, and save the TCP/UDP ports information to HTML file , XML file, or to tab-delimited text file.
CurrPorts also automatically mark with pink color suspicious TCP/UDP ports owned by unidentified applications (Applications without version information and icons)


itibi September 09, 2004 (Article Rating: )


I totally agree with itibi's comments on CurrPorts. I love it. No installation and gives you everything you need.

BurtisB October 22, 2004 (Article Rating: )


Where are the links to the programs?

Anonymous User October 22, 2004 (Article Rating: )


Where are the links to the programs?

Anonymous User October 22, 2004 (Article Rating: )


 See More Comments  1   2 

You must be a registered user or online subscriber to comment on this article. Please log on before posting a comment. Are you a new visitor? Register now




Top Viewed ArticlesView all articles
WinInfo Short Takes: Week of November 23, 2009

An often irreverent look at some of the week's other news, including some post-PDC some soul searching, a Google Chrome OS announcement and a Microsoft response, Windows 7 off to a supposedly strong start, the Jonas Brothers and Xbox 360, and so much more ...

2009 Windows IT Pro Editors' Best and Community Choice Awards

Picking a favorite product from an impressive crowd of competitive offerings is never an easy task, and such was the case with our Editors' Best and Community Choice awards this year. ...

Command Prompt Tricks

One reader shares his tip for setting up the command prompt to reflect a remote path. ...


Security Whitepapers Reducing the Costs and Risks of Branch Office Data Protection

Solving Desktop Management Challenges in Healthcare

Solving Desktop Management Challenges in Education

Related Events Introduction to Identity Lifecycle Manager "2"

SQL Server Security: How to Secure, Monitor & Audit Your Databases

Protecting Mobile Users' Data

Check out our list of Free Email Newsletters!

Security eBooks Spam Fighting and Email Security for the 21st Century

Understanding and Leveraging Code Signing Technologies

A Guide to Windows Certification and Public Keys

Related Security Resources Introducing Left-Brain.com, the online IT bookstore
Looking for books, CDs, toolkits, eBooks? Prime your mind at Left-Brain.com

Discover Windows IT Pro eLearning Series!
Clear & detailed technical information and helpful how-to's, all in our trademark no-nonsense format


Windows IT Pro Home Register FAQ for Windows WinInfo News
Europe Edition About Us Contact Us/Customer Service Media Kit Affiliates / Licensing  
SQL Server Magazine Office & SharePoint Pro DevProConnections IT Job Hound
Left-Brain.com Technology Resource Directory asp.netPRO ITTV Windows SuperSite 
 
 Windows IT Pro is a Division of Penton Media Inc.
 © 2009 Penton Media, Inc. Terms of Use | Privacy Statement