Re: Ports->Process on Win NT/2k

From: brossini@csc.com.au
Date: 09/26/02 

To: R Pradeep Chandran <rpc@pobox.com>
From: brossini@csc.com.au
Date: Thu, 26 Sep 2002 09:34:34 +0800

Fport (cmd line) or Vision (gui) from Foundstone will do that :

http://www.foundstone.com/knowledge/intrusion_detection.html

- Ben

Comments are my own.... not those of my employer.

|---------+--------------------------->
| | R Pradeep |
| | Chandran |
| | <rpc@pobox.com> |
| | |
| | 25/09/2002 02:24|
| | PM |
| | |
|---------+--------------------------->
>-------------------------------------------------------------------------------------------------------------------------------|
  | |
  | To: security-basics@securityfocus.com |
  | cc: |
  | Subject: Ports->Process on Win NT/2k |
>-------------------------------------------------------------------------------------------------------------------------------|

Hi All,
 Is there any utility which provides information on the owner(?)
of a socket on Win NT/2k? What I want, is to find out which process has
opened a socket on the machine. For example, if netstat shows that a
process is listening on port 80, I should be able to use this utility
and find out what that process is.
Hve a nice day,
Pradeep 

--
Keep me away from the wisdom which does not cry, the philosophy which
does not laugh and the greatness which does not bow before children.
                  -Kahlil Gibran, mystic, poet and artist (1883-1931)
R Pradeep Chandran

Relevant Pages

  • Re: Looking for information on MFC TCP Communication
    ... > Note that to use the MFC socket classes the separate threads must be UI threads, ... > there is rarely a need to use separate threads. ... > objects, and not touching the GUI, there are no "thread issues". ... allocate the buffer, but this may be allocating / deleting alot of ...
    (microsoft.public.vc.mfc)
  • Re: tcp connection in gui: event based
    ... Write a small proc that does the accept and sets the connection to ... Use to register procs that get fired when the socket is ... If you have a full line, send it to the GUI, maybe dispatching via ... after to not block the event loop if its a bit bigger ...
    (comp.lang.tcl)
  • Re: Using too many threads?
    ... - Only the main window thread may update the main window GUI. ... Only the details window thread may update the details GUI. ... Is it safe for multiple threads to be reading/writing the same socket? ... "connection controller" thread per connection: ...
    (comp.os.os2.programmer.misc)
  • Re: Cant display Java gui
    ... and pop up the GUI when it receives one. ... >>and returns the decision to your C program via the socket. ... Thanks, Rogan! ... Please respond to "nntp AT dawes DOT za DOT net" ...
    (comp.lang.java.programmer)
  • Re: Cant display Java gui
    ... Have the GUI listen on a localhost socket for a ... and pop up the GUI when it receives one. ... > It also means that you can properly queue the emails for the operator's ... Thanks, Rogan! ...
    (comp.lang.java.programmer)