问题
Also, that we can specifically know which running program is using certain ports and what kind of information they are sending and where specifically? This will work for many people to prevent MIM attacks, trojans, keylogger connections, etc. I know I can partly do this by netstat command on cmd. But what I need to know is that if there is a software that does all of this in once? (Excluding common AVs like Norton, McAfee, Webroot, etc.)
Thanks in advance.
回答1:
in addition to the simple netstat -an
invocations, you'll find additionnal usefull informations on what port is opened, what files are used, with:
unix (linux, macOSX, solaris, many) : lsof (nice presentation by daniel miessler)
then for the content of the packets : tcpdump (same presenter, nice intro)
windows : sysinternal's TCPView
then for the content of the packets (+ statistics, decoding, etc): wireshark
回答2:
I would recomend you nmap, it has a lot of features. http://nmap.org/
来源:https://stackoverflow.com/questions/14225276/is-there-a-software-to-monitor-all-the-ports-opened-and-which-programs-are-using