wathcing programs' port access 1

[realtree]

How would be able to see which programs are attempting to access which ports and by what protocol etc. Like ZoneAlarm does; when a program tries, it asks you how you want to deal with it. This feature must be available as a standalone package- i hope.

In short, I'm looking for a more verbose real-time portscan/netstat type thing.

 

[realtree]

and btw, I searched google about it for like an hour. Nothing from my perspective. (too much consumerism?)

 

[smah]

Try searching for packet sniffer. You will even find some results in this forum. Many may give you more information than what you're after though.

 

[Salem]

> when a program tries, it asks you how you want to deal with it
This is a firewall type application (like ZoneAlarm). Packets of information are actively monitored and action is taken according to whatever pre-defined rules you set up.

> In short, I'm looking for a more verbose real-time portscan/netstat type thing
This is passive - it just watches what is happening, and makes no attempt to change what it going on.
An example of such a tool is Ethereal -

http://www.ethereal.com/

 

[pansophic]

These are Win32API calls that ZoneAlarm uses. You register to receive the messages that are bound to/from a network interface. I believe that you want to look at the SetWindowsHookEx method. It is the same method called by keyboard capture programs.

It should be relatively easy to write the hook portion of the program. I worked on a keyboard sniffer that took a couple of hours to work out the bugs on. Visual Studio .NET makes this a trivial process. But you need to know which messages you should be capturing. I've not looked into the network messages, only the keyboard.


pansophic

 

[realtree]

Yes, I think Ethereal is the one that I was watching someone play with the other day, I didn't think it could do that kind of thing. I'll try it out when i get home!

and pansophic: that sounds like a great solution to try. I like it... if only i knew VB or something I could use that with. I 'm only learning pascal right now, but I'm taking VB come September.

 

[pansophic]

You can implement the Win32API calls in Pascal as well. Take a look at Source Forge for an application called Async Pro. It is an ActiveX object that is written in Delphi and makes extensive use of the Win32API and TAPI to provide serial port access.


pansophic