Trying to track IP access by an appliaction

[John117]

I have an application and am not sure which ip addresses it accesses but would like to block it to only use one that I trust.

Can anyone tell me how I could monitor what ip addresses it uses or sends/recieves from?

[MadBoy]

I have an application and am not sure which ip addresses it accesses but would like to block it to only use one that I trust.

Can anyone tell me how I could monitor what ip addresses it uses or sends/recieves from?

Standard one: netstat -a (build in in windows xp)

The better one is at: http://www.microsoft.com/TechNet/Sysintern...es/TcpView.mspx

Edited October 3, 2007 by MadBoy

[John117]

Good to know! THanks

[weaponx]

Nirsoft CurrPorts is good too http://www.nirsoft.net/utils/cports.html

[lordofthestrings]

netstat -ab

maps every executable to the TCP/ UDP Port they hold opened

example:

TCP HOSTNAME(local):3389(localport)     HOSTNAME(remote):0(remoteport)  LISTENING(state)       1308(PID)
-- unknown component(s) --
c:\winntwks\system32\rpcss.dll
C:\WINNTWKS\system32\svchost.exe
C:\WINNTWKS\system32\ADVAPI32.dll

[maqleod]

netstat -ab

maps every executable to the TCP/ UDP Port they hold opened

example:

TCP HOSTNAME(local):3389(localport)     HOSTNAME(remote):0(remoteport)  LISTENING(state)       1308(PID)
-- unknown component(s) --
c:\winntwks\system32\rpcss.dll
C:\WINNTWKS\system32\svchost.exe
C:\WINNTWKS\system32\ADVAPI32.dll

out of curiosity, how would you feed the data that netstat -ab gives you into autoit for parsing?

I have been looking for a way to do this; i want to be able to list the info returned in a listview.

[lordofthestrings]

I followed the example:

; Demonstrates StdoutRead()
#include <Constants.au3>

$sCommand= Run("netstat -ab", @SystemDir, @SW_HIDE, $STDERR_CHILD + $STDOUT_CHILD)

While 1
    $line = StdoutRead($sCommand)
    If @error Then ExitLoop
    MsgBox(0, "STDOUT read:", $line)
Wend

While 1
    $line = StderrRead($sCommand)
    If @error Then ExitLoop
    MsgBox(0, "STDERR read:", $line)
Wend

MsgBox(0, "Debug", "Exiting...")

[maqleod]

I followed the example:

; Demonstrates StdoutRead()
#include <Constants.au3>

$sCommand= Run("netstat -ab", @SystemDir, @SW_HIDE, $STDERR_CHILD + $STDOUT_CHILD)

While 1
    $line = StdoutRead($sCommand)
    If @error Then ExitLoop
    MsgBox(0, "STDOUT read:", $line)
Wend

While 1
    $line = StderrRead($sCommand)
    If @error Then ExitLoop
    MsgBox(0, "STDERR read:", $line)
Wend

MsgBox(0, "Debug", "Exiting...")

thx, I just didn't know what function did that sort of thing.