[LINK] One must wonder

[Adam Neat]

If people are keen to understand what processes running on their Windows box
are making network connections, look for a tool called F-Port. Lists all
network connections (in all states) in a similar manner to netstat, but then
also associates each process to network connections (in all states).

Also take a look at what Network Ice and McAfee offer in the way of system
monitoring - both can be setup to watch your machine for applications that
are starting up and or attempting to access the network. 

-------------------------------------------------
Adam Neat | Melbourne, Australia
email:  adamneat at anoti.com   
msn:    adamneat_ at hotmail.com
web:    http://www.anoti.com/adamneat/
-------------------------------------------------
 
> -----Original Message-----
> From: link-bounces at anumail0.anu.edu.au [mailto:link-
> bounces at anumail0.anu.edu.au] On Behalf Of rchirgwin at ozemail.com.au
> Sent: Thursday, 1 September 2005 12:01 PM
> To: link at anu.edu.au
> Subject: Re: Re: [LINK] One must wonder
> 
> The alternative, of course, is inaccurate reporting.
> 
> FUD, of course, is not the sole preserve of vendors.
> 
> http://support.microsoft.com/default.aspx?scid=kb;en-us;314056
> 
> You can easily identify services operating under svchost. You could just
> as easily terminate each process, one-by-one, if you were desperate to
> identify which one was initiating a communications session.
> 
> Most simply of all, you can tell the firewall (not the windows firewall,
> but something like ZoneLabs) that svchost is not allowed to contact the
> Internet.
> 
> Of course none of these would occur to Joe Sixpack but the subject of the
> story identifies himself as a tech consultant. Methinks he's identified a
> journalist who hasn't the ability to verify the technical details for
> himself ...
> 
> RC
> 
> >
> > From: Rick Welykochy <rick at praxis.com.au>
> > Date: 01/09/2005 12:10:21
> > To: Stephen Loosley <stephen at melbpc.org.au>
> > CC: link at anu.edu.au
> > Subject: Re: [LINK] One must wonder
> >
> > Stephen Loosley wrote: