March 16, 2004

Microsoft releases new tool to monitor network ports

Microsoft has released a new tool today called Port Reporter (PortRptr.exe) that will log TCP and UDP port activity on a local Windows system.

On Windows XP and Windows Server 2003 this service is able to log which ports are used, which process is using the port, if the process is a service, which modules the process has loaded and which user account is running the process.

On Windows 2000 systems, this service is limited to logging which ports are used and when. In both cases the information that the service provides can be helpful for security purposes, troubleshooting scenarios, and profiling systems’ port usage.

This is a small, but really useful tool that runs as a service. I suggest you download it and give it a try if you are curious about the ports open on your machine(s).

Posted by SilverStr at March 16, 2004 11:27 AM | TrackBack
Comments

Netstat works fairly well and comes with Windows 2003.

Posted by: Wim at March 16, 2004 11:07 PM

I like to use systeminternals.com; they have a great tool TCPView that gives you the same information as well as the process tied to each port handle/thread.

Posted by: Jai at March 17, 2004 02:43 PM

I was going to recommend the same tool, from sysinternals.... I've also found their FileMon utility to be extremely useful as well.

Posted by: Darren at March 19, 2004 01:17 PM

I found this cool log parser for Port Reporter log files. Its great for security audits.

http://download.microsoft.com/download/2/8/8/28810043-0e21-4004-89a3-2f477a74186f/PRParser.exe

Posted by: John at July 31, 2004 09:36 AM