Re: Port Scanning



Download and execute Sysinternal's TCPView on the affected computer.
TCPView will give you a real-time view of the TCP connections that your
computer is making.

http://www.microsoft.com/technet/sysinternals/utilities/TcpView.mspx

J Wolfgang Goerlich

marquisaj wrote:
I was notified by a network administrator that one of our servers is
running a full port scan on their network. How can I detect how this is
being done on our server. They sent a log that shows the Time Stamp,
Attack, Source IP, and Destination IP.

The server is a Windows 2000 server with IIS 5.0.

.



Relevant Pages

  • Re: Site- und Inhaltsregeln im ISA2000
    ... über welches Protokoll auf welchen Server zu. ... Ggf. ... mit folgenden Tool auf Server testen: ... TCPView ...
    (microsoft.public.de.german.backoffice.smallbiz)
  • NAVLOG.EXE and Praise for MS Security Support
    ... For the past 2+ weeks I've been fighting a problem with our SBS2003 Server. ... ProcessExplorer and TCPView. ... I called Microsoft Security Support on Friday and had the best support ...
    (microsoft.public.windows.server.sbs)
  • Huge number of strange winsocks
    ... A couple of minutes after rebooting the Win server 2000, ... TCPView and I saw close to 2 thousand lines of TCP. ...
    (microsoft.public.win32.programmer.networks)
  • ldap w2k server linux suse 9.2 client: user unkown
    ... I want configure my linux suse 9.2 workstations to authenticate against ... The workstation seems to connect to the server ... (tcpview displays the connection), but all I get is the error message ...
    (comp.os.linux.misc)