1. Windows itself comes with the netstat command about the netstat command, let's take a look at the introduction in the Windows Help file: NetStat Display Protocol Statistics and the current TCP / IP network connection. This command can only be used after the TCP / IP protocol is installed. NetStat [-a] [-e] [-n] [-r] [-r] [interval] parameter -a display all connection and listening ports. Server connections are usually not displayed. -E Displays Ethernet statistics. This parameter can be used in conjunction with the -s option. -N Displays the address and port number in digital format (instead of trying to find the name). -S Displays statistics for each protocol. By default, statistics on TCP, UDP, ICMP, and IP are displayed. The -p option can be used to specify the default subset. -P protocol Displays the connection of protocols specified by Protocol; Protocol can be TCP or UDP. If you use the -s option to display the statistics of each protocol, Protocol can be TCP, UDP, ICMP, or IP. -R Displays the contents of the routing table. Interval re-displays the selected statistics and suspend Interval seconds between each display. Stop the statistics by Ctrl B stop. If this parameter is omitted, NetStat will print a current configuration information. Ok, after reading these help files, we should understand the use of the netstat command. Let us now learn to use this command to see your machine open port. Go to the command line, using the NetStat commands A and N two parameters: c: /> netstat -an active connections proto 0.0.0.0:80 0.0.0.0:0:0.0.0.0.0.0.0:0:0.0:0:21 0.0.0.0:0.0.0:0.0.0.0.0.0.0.0:0.0.0.0.0.0:0.0:0.0.0.0.0:0.0:0:0.0.0.0.0:0.0:0:0.0.0.0.0:0.0:0.0.0.0.0:0.0.0:0 UDP 0.0.0.0:1047 0.0.0.0: 0 Explanation, Active Connections refers to the current active activity connection. Proto is the protocol name of the connection, local address is the IP address of the local computer and the port number that is being used. Foreign address is the IP of the remote computer connected to the port. The address and port number, State is the state indicating the TCP connection, and you can see the listening port of the latter three lines is the UDP protocol, so there is no state represented by the State. Look! My machine's 7626 port has been opened, listening to the connection, like this is very likely that it has been infected with the ice river! Running a network, killing viruses with anti-virus software is the right practice. 2. Working under Windows2000 The FPORT uses Windows2000's friends to be more fortunate than using Windows 9x, because you can use the fPort program to display the correspondence between the local open port and the process. FPORT is a software for all Open TCP / IP and UDP ports in the system, as well as software such as all open TCP / IP and UDP ports, and their corresponding paths such as the full path, PID identity, process names and other information.
