Regmon by Sysinternals.com

By Foundstone, Inc.

System intruders usually depend on vulnerable TCP/UDP ports being available for them to target, which means the more ports open, the greater the risk. Locking down applications that aren’t required is an essential part of securing your network, but to do this effectively you first need to know what ports are available and what application is responsible for them. Doing this, sometimes, is not nearly as easy as it may sound. This is where FPort comes in. It will scan your system and snitch on all of the processes exposing themselves to potential exploitation.

fport v1.31 – reports all open TCP/IP and UDP ports and maps them to the owning application.

fport reports all open TCP/IP and UDP ports and maps them to the owning application.

fport requires the usage of psapi.dll. On Windows NT, psapi.dll must be in the same dir, or path, as fport. For Windows 2000, this is not the case, since the system contains the .dll. The program contains five (5) switches. The switches may be utilized using either a ‘/’ or a ‘-‘ preceding the switch.

The switches are:

/h - Help
/a - sort by application
/i - sort by process ID
/ap - sort by application path
/p - sort by port

To run the program, place the .exe and the .dll in the same folder and run the .exe from a command prompt.

Here’s a sample of one such report:

 Pid Process Port Proto Path 516 MSTask -> 1025 TCP C:\WINNT\system32\MSTask.exe 8 System -> 1027 TCP 8 System -> 1036 TCP 8 System -> 139 TCP 8 System -> 445 TCP 400 svchost -> 135 TCP C:\WINNT\system32\svchost.exe 8 System -> 137 TCP 8 System -> 138 TCP 8 System -> 445 TCP 228 lsass -> 500 TCP C:\WINNT\system32\lsass.exe 216 services -> 1026 TCP C:\WINNT\system32\services.exe 400 svchost -> 135 TCP C:\WINNT\system32\svchost.exe 

Download Fport v.1.31  If you have a problem with this download, please email us!

Copyright 2000 (c) by Foundstone, Inc.