Sign in to follow this  
Followers 0
John117

Trying to track IP access by an appliaction

8 posts in this topic

I have an application and am not sure which ip addresses it accesses but would like to block it to only use one that I trust.

Can anyone tell me how I could monitor what ip addresses it uses or sends/recieves from?

Share this post


Link to post
Share on other sites



#2 ·  Posted (edited)

I have an application and am not sure which ip addresses it accesses but would like to block it to only use one that I trust.

Can anyone tell me how I could monitor what ip addresses it uses or sends/recieves from?

Standard one: netstat -a (build in in windows xp)

The better one is at: http://www.microsoft.com/TechNet/Sysintern...es/TcpView.mspx

Edited by MadBoy

My little company: Evotec (PL version: Evotec)

Share this post


Link to post
Share on other sites

Good to know! THanks

Share this post


Link to post
Share on other sites

netstat -ab

maps every executable to the TCP/ UDP Port they hold opened

example:

TCP HOSTNAME(local):3389(localport)     HOSTNAME(remote):0(remoteport)  LISTENING(state)       1308(PID)
-- unknown component(s) --
c:\winntwks\system32\rpcss.dll
C:\WINNTWKS\system32\svchost.exe
C:\WINNTWKS\system32\ADVAPI32.dll

Share this post


Link to post
Share on other sites

netstat -ab

maps every executable to the TCP/ UDP Port they hold opened

example:

TCP HOSTNAME(local):3389(localport)     HOSTNAME(remote):0(remoteport)  LISTENING(state)       1308(PID)
-- unknown component(s) --
c:\winntwks\system32\rpcss.dll
C:\WINNTWKS\system32\svchost.exe
C:\WINNTWKS\system32\ADVAPI32.dll
out of curiosity, how would you feed the data that netstat -ab gives you into autoit for parsing?

I have been looking for a way to do this; i want to be able to list the info returned in a listview.


[u]You can download my projects at:[/u] Pulsar Software

Share this post


Link to post
Share on other sites

I followed the example:

; Demonstrates StdoutRead()
#include <Constants.au3>

$sCommand= Run("netstat -ab", @SystemDir, @SW_HIDE, $STDERR_CHILD + $STDOUT_CHILD)

While 1
    $line = StdoutRead($sCommand)
    If @error Then ExitLoop
    MsgBox(0, "STDOUT read:", $line)
Wend

While 1
    $line = StderrRead($sCommand)
    If @error Then ExitLoop
    MsgBox(0, "STDERR read:", $line)
Wend

MsgBox(0, "Debug", "Exiting...")

Share this post


Link to post
Share on other sites

I followed the example:

; Demonstrates StdoutRead()
#include <Constants.au3>

$sCommand= Run("netstat -ab", @SystemDir, @SW_HIDE, $STDERR_CHILD + $STDOUT_CHILD)

While 1
    $line = StdoutRead($sCommand)
    If @error Then ExitLoop
    MsgBox(0, "STDOUT read:", $line)
Wend

While 1
    $line = StderrRead($sCommand)
    If @error Then ExitLoop
    MsgBox(0, "STDERR read:", $line)
Wend

MsgBox(0, "Debug", "Exiting...")
thx, I just didn't know what function did that sort of thing.

[u]You can download my projects at:[/u] Pulsar Software

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0