How to determine outgoing connections on Windows and Linux?

[ugh]

Hi folks,

Are there any applications or commands in either of the operation systems to list down the outgoing connections from a PC from all the running apps?

Thanks.

 

[Confused]

Windows:

Go to a command prompt and type netstat -a

 

[WannaFly]

well, if you want to know what app it is you need a software based firewall, kerio is free.

 

[drag]

Originally posted by: Confused
Windows:

Go to a command prompt and type netstat -a

Pretty much the same for Linux. Although the resulting output in both OS's is going to be pretty different. (I think)

here is a article on it

 

[Nothinman]

You can use the -p switch to netstat on Linux to have it also display the pid/program that owns the connection.

 

[CTho9305]

Originally posted by: Nothinman
You can use the -p switch to netstat on Linux to have it also display the pid/program that owns the connection.

foundstone's fport will be useful for windows.

 

[Nothinman]

foundstone's fport will be useful for windows.

Or you can just use the -o switch (or is it /o?) to netstat if you have XP. But since so many things are just threads to svchost it becomes a big PITA to determine what is really listening on certain ports.

 

[CTho9305]

Originally posted by: Nothinman

foundstone's fport will be useful for windows.

Or you can just use the -o switch (or is it /o?) to netstat if you have XP. But since so many things are just threads to svchost it becomes a big PITA to determine what is really listening on certain ports.

interesting. Never knew that. fport gives you exe names though, which is a little more convenient.

 

[ugh]

Thanks for the info folks. One thing though, netstat only provides the addresses but not the entire full path/URL to where an application connects to. Anywhere to find that out?

 

[Nothinman]

You can't find that out, that's part of the transaction that the kernel doesn't watch (well technically you could probably use a iptables module or something to do that, but noone does that I know of).

 

[n0cmonkey]

Originally posted by: ugh
Thanks for the info folks. One thing though, netstat only provides the addresses but not the entire full path/URL to where an application connects to. Anywhere to find that out?

tcpdump/windump might give you more information then.