Using security scanners like GFI LANguard or Super Scanner you can port scan the computers on your network for open ports. Say you find a computer with port 25 (email server) open, how do you find out what program has that port open? Here are a few ways to map a port to a process.
1. Windows has a built in program called NETSTAT this program shows what TCP and UDP ports are open on your computer. From a DOS prompt run NETSTAT -ano this will list all ports and the Process ID associated with the port. Open Task Manager to map the Process ID to the Process.
2. FPort is a command line program you can download from Foundstone that will map ports to processes
3. TCPView from Sysinternals. This tool unlike the other tools had a GUI Interface.
No comments:
Post a Comment