Network monitoring app

[TeeJay3800]

 

WWDC is telling me that TCP port 2278 is open, and as you can tell by that link, there is no specific information available on that port. I'm concerned that a malicious program of some time (virus or other) is using that port, and I know there are software apps that allow you to see the endpoint that a process is connecting to. I've seen this feature on various firewalls, but I'm not running a software firewall anymore, so I don't have access to such a feature. Can anyone recommend an app that can tell me what server that process is connecting to via 2278?

[YoKenny]

Try TCPView

Introduction

 

TCPView is a Windows program that will show you detailed listings of all TCP and UDP endpoints on your system, including the local and remote addresses and state of TCP connections. On Windows Server 2008, Vista, NT, 2000 and XP TCPView also reports the name of the process that owns the endpoint. TCPView provides a more informative and conveniently presented subset of the Netstat program that ships with Windows. The TCPView download includes Tcpvcon, a command-line version with the same functionality.

http://technet.microsoft.com/en-us/sysinte...s/bb897437.aspx

[TeeJay3800]

Good 'ole SysInternals! Thanks, that's exactly what I was looking for.

 

Does that port being open seem like a warning sign, or is it not something I should not be concerned about?

 

EDIT: n/m, TCPView tells me its only my IM client (Miranda) that is listening on that port. Thanks for the help on this.

[YoKenny]

TCPView tells me its only my IM client (Miranda) that is listening on that port. Thanks for the help on this.

You're welcome.

 

The SysInternals tools are quite good and free from Microsoft's Mark Russinovich who has produced a few nice tools.