Want to know how many applications and processes which are connected to the network without your knowledge?
the command for you is netstat -ano . I trust that after the laughs do not hardly remember it and you will certainly treasure :-).
Anus as the set of properties that show the connections or listening (-a), on which ports and to / from which IP addresses (-n), the Process ID of the programs that have initialized these connections (-o) .
It only remains to translate the PID in the name of the process to do just use the command:
tasklist /FI “PID eq [PID di netstat]“
Conversely, if you want to know the PID for example Firefox, you use:
tasklist /FI “IMAGENAME eq firefox.exe”
A bit cumbersome but better than nothing, especially when you can not install utilities much more comfortable, complete and immediate as CurrPorts .
If you think you've found some suspicious connection, you can check the site constantly updated nmap in the List of Well-Known Ports
One Response
Netstat: identify malware monitor network connections | Bleakants.com
October 26th, 2008 at 7:36 pm
1[...] I wrote recently about the netstat command windows in post View the TCP / UDP sessions with the active command prompt. [...]
RSS feed for comments on this post · TrackBack URI
Leave a reply