October 13, 2003 08:13 PM

11 Port Enumerators

Catch malware!
Rating: (0)
Windows IT Pro
InstantDoc ID #40313
One of the most frequently fielded questions among security analysts is, "Do I have a Trojan-horse program if I've found a port open on my computer?" Variations of this question litter security mailing lists, but the answer is always the same: Trace the port number to the program that's opening the port, and investigate the program. The process of tracing an open port to its causative agent is called port enumeration (or port mapping). Of course, the answer assumes that you have an adequate unde...

ARTICLE TOOLS

You must be a paid VIP Member to access this entire article.

Already a VIP Member? Please log in now:

NOT A VIP MEMBER? YOU CHOOSE:

Monthly or Annual

VIP Membership

Compare Member Benefits

Add a Comment

Why, after belonging and subsrcibing to WinITPro do I now have to pay for another subscribtion, SecurityPro VIP, to get information on a particular topic? I realize it's about making money but this is an unprofessional way to go about it. I should not have to pay extra or for another subscription! Yes I want to read more of the article but why do I have to pay for it AGAIN!
Please resolve this mess. John

JOHN A5/18/2007 6:32:47 AM


Excellent article! i agree with the author, Port Explorer is hard to beat so its my favourite, i also use the Diamondcs OpenPorts console program as its far better than netstat. Port Explorer is the only one that also lets you packet-sniff both ports and also individual processes, as well as close ports


Anonymous User 8/4/2005 11:27:59 PM


pAre these rocess/port associat relation listing tools with open source ?

Anonymous User 3/2/2005 11:49:18 AM


The article is quite good. But it would have been of much use to me if the technique behind such active process identification techniques could be elaborated.

Anonymous User 11/15/2004 11:25:41 PM


Good article, stumbled here from the Port Explorer site.

Since some people are asking for links
http://www.diamondcs.com.au/portexplorer/

Anonymous User 11/8/2004 11:58:31 PM


Another tool I find to be most useful (and free / adfree) to achieve maximum security is StopListening (www.nonebar.com/sl.html).

Excellent read BTW. Jason

Anonymous User 10/23/2004 1:55:28 AM


Where are the links to the programs?

Anonymous User 10/22/2004 4:10:19 PM


Where are the links to the programs?

Anonymous User 10/22/2004 4:10:19 PM


I totally agree with itibi's comments on CurrPorts. I love it. No installation and gives you everything you need.

BurtisB10/22/2004 11:25:58 AM


The Best of the best utility of this category is missing:
NirSoft CurrPorts !

http://nirsoft.mirrorz.com/

CurrPorts displays the list of all currently opened TCP/IP and UDP ports on your local computer. For each port in the list, information about the process that opened the port is also displayed, including the process name, full path of the process, version information of the process (product name, file description, and so on), the time that the process was created, and the user that created it.
In addition, CurrPorts allows you to close unwanted TCP connections, kill the process that opened the ports, and save the TCP/UDP ports information to HTML file , XML file, or to tab-delimited text file.
CurrPorts also automatically mark with pink color suspicious TCP/UDP ports owned by unidentified applications (Applications without version information and icons)


itibi9/9/2004 6:27:50 AM


You must log on before posting a comment.

Are you a new visitor? Register Here
Free Power Tools Brochure
Get Mark Minasi's 17-page guide today!



      

advertisement

GOOGLE LINKS
SPONSORED LINKS
FEATURED LINKS

White Papers

Your remote offices contain valuable electronic data – are they adequately protected? Learn how proven technologies can reliably and cost-effectively back up a branch office from a central location, in real time, to disk or tape, and even utilize existing backup solutions.

Downloads

PacketTrap IT is a comprehensive and affordable network management and application monitoring solution that solves problems associated with bandwidth, network and application performance, and connectivity. Gain insight into your network - try PacketTrapIT free for 21 days!

Web Seminars

IT administrators have to solve a myriad of problems. This web seminar outlines the ten most common systems management pains - including managing highly distributed systems and dealing with data theft/loss – and the best practices to address each.

eLearning Series

We bring the experts direct to you to share their real-world perspective and expertise. During each event, three sessions stream in real time, so you can learn, ask questions, and get solutions.
Upcoming event: Getting the Most with Exchange 2010 with Paul Robichaux

Subscribe to Windows IT Pro!

Windows is a trademark of the Microsoft group of companies. Windows IT Pro is used by Penton Media Inc. under license from owner.