FirewallWizards
[Top] [All Lists]

Re: [fw-wiz] OT? New compromise.

To: <firewall-wizards@listserv.cybertrust.com>
Subject: Re: [fw-wiz] OT? New compromise.
From: "Mike Barkett" <mbarkett@us.checkpoint.com>
Date: Thu, 29 Mar 2007 17:12:23 -0400
Delivered-to: sp-com-lists@consult.net
Delivered-to: fwwizards-list2@consult.net
Delivered-to: firewall-wizards@listserv.cybertrust.com
In-reply-to: <mailman.27.1175197887.19473.firewall-wizards@listserv.icsalabs.com>
List-archive: <https://listserv.icsalabs.com/pipermail/firewall-wizards>
List-help: <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=help>
List-id: Firewall Wizards Security Mailing List <firewall-wizards.listserv.icsalabs.com>
List-post: <mailto:firewall-wizards@listserv.icsalabs.com>
List-subscribe: <https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards>, <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=subscribe>
List-unsubscribe: <https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards>, <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=unsubscribe>
References: <mailman.27.1175197887.19473.firewall-wizards@listserv.icsalabs.com>
Reply-to: Firewall Wizards Security Mailing List <firewall-wizards@listserv.icsalabs.com>
Sender: firewall-wizards-bounces@listserv.icsalabs.com
Thread-index: AcdyPEaDMgEmJksMRvyUG28gyo3YGQACl7LA
> Date: Thu, 29 Mar 2007 08:30:08 +0200
> From: Mattias Ahnberg <mattias@ahnberg.pp.se>
> Subject: Re: [fw-wiz] OT? New compromise.
> To: Firewall Wizards Security Mailing List
>       <firewall-wizards@listserv.icsalabs.com>
> Message-ID: <460B5CF0.4030402@ahnberg.pp.se>
> Content-Type: text/plain; charset=ISO-8859-1
> 
> J. Oquendo wrote:
> >> program called openports which would run on the machine and relate any
> >> LISTENING or ESTABLISHED ports to the actual file that has the port
> >> open. This would then give you the service/process/program waiting for
> >> traffic on that port.
> > On Windows
> > /c:\netstat -an |find /i "listening"/
> >
> > Why download when you can use existing tools...
> 
> Because that command does not let you know what application on
> your local machine has the port bound?
> 
> There are tools like openports or the sysinternals set you may
> use for that purpose, but to my knowledge there aren't any
> built into Windows itself to do this.
> --
> /ahnberg.


Windows: netstat -aon

Linux: netstat -apn

Enjoy.

-MAB

_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

<Prev in Thread] Current Thread [Next in Thread>