a tool like nestat

From: Juan B (juanbabi_at_yahoo.com)
Date: 08/30/04

  • Next message: slackzin_at_hush.com: "Thin Client recommendations" 
    Date: Mon, 30 Aug 2004 10:10:02 -0700 (PDT)
To: security-basics@securityfocus.com

    Hi,

    I know there is a tool more sofisticated than netstat

    that can even show me which file is listening to
    connections and stuff like that.

    do u know about such tool ?

    thanks

                    
    __________________________________
    Do you Yahoo!?
    New and Improved Yahoo! Mail - Send 10MB messages!
    http://promotions.yahoo.com/new_mail

    ---------------------------------------------------------------------------
    Computer Forensics Training at the InfoSec Institute. All of our class sizes
    are guaranteed to be 12 students or less to facilitate one-on-one
    interaction with one of our expert instructors. Gain the in-demand skills of
    a certified computer examiner, learn to recover trace data left behind by
    fraud, theft, and cybercrime perpetrators. Discover the source of computer
    crime and abuse so that it never happens again.

    http://www.infosecinstitute.com/courses/computer_forensics_training.html
    ----------------------------------------------------------------------------

  • Next message: slackzin_at_hush.com: "Thin Client recommendations"

    Relevant Pages

    • Re: paging the network/TCP-isti
      ... Checking for open ports using grc.com ... showed these TCP connections to be 'stealthed'. ... If you do "netstat -na" it will display addresses ... Listening anyway means that there is NO connection. ...
      (uk.rec.motorcycles)
    • Re: strange outbound connection
      ... > are actively listening for connections, even if they're bound to the local ... That will show you some established network connections ... > anything will show up here that doesn't show up in 'netstat --ip', ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
      (Debian-User)
    • Re: paging the network/TCP-isti
      ... Checking for open ports using ... grc.com showed these TCP connections to be 'stealthed'. ... Listening anyway means that there is NO connection. ... Looks like the designer of netstat wanted to put something ...
      (uk.rec.motorcycles)
    • Re: looking for detailed IP traceroute
      ... > Yahoo, I believe. ... accept other connections, then you will see these other addresses you not ... The lower IP addy is MS in Redmond WA, and I can assume that is the news ... Close all active Windows, run Netstat, and you'll get nothing (maybe, ...
      (microsoft.public.windowsxp.security_admin)
    • RE: Compromised Win2000 machine.
      ... Running tools like fport, netstat, handle, listdlls, ... and comparing the open ports to lists of known trojans ... Do You Yahoo!? ...
      (Incidents)