Any good protocol monitors?

[Blur]

Hey guys,

I'd like to find a program that can tell me what protocol (TCP, UDP) and port an application is using to access an outside network. Anyone know of such a program? Freeware would be great if possible.

Thanks

 

[n0cmonkey]

netstat?

 

[Blur]

Originally posted by: n0cmonkey
netstat?

I was wondering about that, does netstat show UDP activity too? When i ran it it only showed TCP activity.

 

[nweaver]

tcpdump + ethereal/wireshark FTW

EDIT: TCP Dump to capture, ethereal/wireshark (on a computer that can be crashed) to read the capture file and do analysis on.

WHy not just run ethereal and skip the tcpdump capture? because Ethereal is the only application with more security problems then IIS5

 

[n0cmonkey]

Originally posted by: Blur

Originally posted by: n0cmonkey
netstat?

I was wondering about that, does netstat show UDP activity too? When i ran it it only showed TCP activity.

Yes, it shows UDP also. Look for port 445 on a WinXP machine (near the bottom, TCP apparently comes first).

 

[Blur]

Great, thanks guys