What program(s) are accessing the internet

[Guest]

I have WinXP pro. My LAN "sent" icon stays on / flashes often. I can see the
sent bytes incrementing. It's not huge, but still I'd like to figure out
what programs or services are accessing the internet.

How can I find that out? I see a bunch of services and exes in the task
manager, but I have no idea what the offenders are.

Thanks.

 

[CreateWindow]

Hi -,

Very easy. Download the free network monitor from Microsoft. (Network
Monitor 3.0 in Downloads).
Install it - associate it with your network device, open a new capture tab,
push the ">" record button and you will see all that traffic. Probably
harmless IGMP messages if you are on DSL or Cable etc.
Note the "port" numbers on ant suspicios TCP datagrams - then, on your XP,
in a command prompt, give the command:
netstat -ao the far right "PID" matches your process id in task manager.
Hope that helps,


CreateWindow
http://mymessagetaker.com
Stop using those paper phone message pads
make the computer work for you.
http://justpageprobe.com
The FREE Web page utility you always wanted.
Monitor your enterprise Web Servers.
Keep your router connected.
Email your IP to where you need it.

 

[John John]

Install a third party firewall and it will give you that information.
Or use the complicated microsoft way to find out. You can install a
firewall with a small footprint and use it to find out what is going on.
Kerio PF 2.1.5 is a small footprint firewall that you could use.
Direct download link here:
http://www.sunbelt-software.com/ihs/alex/keriopf215.zip

As a rule you should not run two firewalls at the same time, it provides
no additional security and makes for an extra layer of complexity on
your machine. It does not however harm anything, for short periods and
for specials needs you can run two firewalls at the same time. Kerio is
easily enabled and disabled and it will or should not interfere with the
Windows firewall. It will inform you and ask you to grant or deny
permissions for anything that tries to access the internet. Once you
know what is trying to get out you can open the program in question and
disable the relevant options.

John

 

[SingaporeWebDesign]

Hello,

You can use TCPView (hosted by Microsoft) to accomplish this. It is free.
http://www.microsoft.com/technet/sysinternals/utilities/TcpView.mspx


--
Singapore Website Design
http://www.bootstrike.com/Webdesign/
Singapore Web Hosting
http://www.bootstrike.com/WinXP/faq.html
Windows XP FAQ

 

[Wesley Vogel]

netstat.exe displays protocol statistics and current TCP/IP network
connections.

process identifier (PID)
[[A numerical identifier that uniquely distinguishes a process while it
runs. Use Task Manager to view PIDs.]]

Open a command prompt...
Start | Run | Type: cmd | Click OK |
Type: netstat -ano and hit ENTER

Look at the number in the PID column. You can match up the PID # in Task
Manager to find the process that is using the port.

Open the Task Manager, Ctrl + Shift + Esc.
Click on the Processes tab.
Click the PID column header to sort the PID #s in order.

PID is Process ID or process identifier. These numbers change every time
you reboot. I think that they are just an arbitrarily assigned number.
Each process has a different number while running. A process can also have
a different PID if opened and closed, etc.

You can type in a command prompt: netstat /? for help.

More netstat HELP, paste the following line into Start | Run and click OK...

hh ntcmds.chm::/netstat.htm

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In