I am a registered user of IP-Tools and I find it very useful tool. One thing I would like to see on the 'Connections' screen is a column that shows what application actually has the port open. This would be very helpful tracking down unauthorized connections. Thanks.
I have this task in my "to do" list. But truth to say I don't know any documented method to implement this feature.
Of course I can replace system wsock32.dll to trace all request to winsock, but I don't like this idea. It can has side effect for other applications.
I was evaluating the SYGATE 5.0 Personal Firewall product and I saw that they have this feature available. Does an application have to request or register port usage with the OS? Maybe there is someway to read it out of the registry?
No, registry cannot help. I think SYGATE replaces wsock32.dll or installs driver. Its Ok for firewall because firewall must intercept all network packets. IP-Tools is another kind of software, it try to retrieve information without ANY changes in the system
Probably you are right. On the other hand this and other new functions can be implemented in another program that will install driver and intercept all IP packets.
On 2002-04-06 13:48, Anonymous wrote:
I am a registered user of IP-Tools and I find it very useful tool. One thing I would like to see on the 'Connections' screen is a column that shows what application actually has the port open. This would be very helpful tracking down unauthorized connections. Thanks.