Netstat (Network Statistics)
Netstat is a command line tool that displays network connections (incoming and outgoing), routing tables, and a number of network interface statistics.
An example of a command in is netstat -s -p tcp or
netstat -s -p udp or netstat -o 5, or netstat -n –o (open connections), or netstat -b (the process that established each open connection). If you are looking for malware, you could also try netstat -a to display all open and listening ports. For instructions, type in netstat -0 (zero). My favorite command is netstat –an to show all active connections in numerical format.
Netstat should be used to audit your network. Then use telnet to try and connect to ports that appear to be open that shouldn’t be.
Microsoft System Internals
You can also look at active ports with a free program from Microsoft called System Internals.
|
