| Author |
Message |
Jim Moon
Guest
|
 Posted:
Wed Oct 19, 2005 8:51 pm Post subject:
How to Detect All Connections? |
|
|
I'd like to know what system tools, etc., to use in the detection of all
connections to a Windows Server 2003 machine.
I already know to look here:
1) Administrative Tools -->
Terminal Services Manger
2) Compuer Management -->
System Tools -->
Shared Folders
3)Microsoft SQL Servers-->
(local) -->
Management -->
Current Activity
Where else might I look to find any other connections to Windows Server
2003?
Much thanks,
Jim |
|
| Back to top |
|
 |
Chris Weber [Security MVP
Guest
|
| Posted:
Wed Oct 19, 2005 8:51 pm Post subject:
Re: How to Detect All Connections? |
|
|
from the command line, run:
netstat -ano
This will list all open TCP/UDP connections mapped to the connected host,
and mapped to the process. If you'd like a graphical view, download TCPView
from sysinternals and you'll see every open TCP/UDP connection to your host.
--
Chris Weber
Security MVP
"Jim Moon" <please.reply@group> wrote in message
news:usCeRQO1FHA.2064@TK2MSFTNGP09.phx.gbl...
| Quote: | I'd like to know what system tools, etc., to use in the detection of all
connections to a Windows Server 2003 machine.
I already know to look here:
1) Administrative Tools --
Terminal Services Manger
2) Compuer Management --
System Tools --
Shared Folders
3)Microsoft SQL Servers--
(local) --
Management --
Current Activity
Where else might I look to find any other connections to Windows Server
2003?
Much thanks,
Jim
|
|
|
| Back to top |
|
|
Jim Moon
Guest
|
| Posted:
Wed Oct 19, 2005 8:51 pm Post subject:
Re: How to Detect All Connections? |
|
|
Thanks, Chris.
"netstat -ano" and TCPView should take care of my connection detection
issue!
Jim
"Chris Weber [Security MVP]" <chris@dev.nul> wrote in message
news:e3KtlbO1FHA.3896@TK2MSFTNGP10.phx.gbl...
| Quote: | from the command line, run:
netstat -ano
This will list all open TCP/UDP connections mapped to the connected host,
and mapped to the process. If you'd like a graphical view, download
TCPView from sysinternals and you'll see every open TCP/UDP connection to
your host.
--
Chris Weber
Security MVP
"Jim Moon" <please.reply@group> wrote in message
news:usCeRQO1FHA.2064@TK2MSFTNGP09.phx.gbl...
I'd like to know what system tools, etc., to use in the detection of all
connections to a Windows Server 2003 machine.
I already know to look here:
1) Administrative Tools --
Terminal Services Manger
2) Compuer Management --
System Tools --
Shared Folders
3)Microsoft SQL Servers--
(local) --
Management --
Current Activity
Where else might I look to find any other connections to Windows Server
2003?
Much thanks,
Jim
|
|
|
| Back to top |
|
|
Steven L Umbach
Guest
|
| Posted:
Fri Oct 21, 2005 4:51 pm Post subject:
Re: How to Detect All Connections? |
|
|
Also consider looking in the security logs for logon events for users that
have authenticated or attempted to be authenticated to your computer. Use
Local Security Policy [secpol.msc] to make sure that auditing of logon
events is enabled for success and failure and be sure to increase the size
of the security log to at least 20MB as it is very small by default. ---
Steve
"Jim Moon" <please.reply@group> wrote in message
news:usCeRQO1FHA.2064@TK2MSFTNGP09.phx.gbl...
| Quote: | I'd like to know what system tools, etc., to use in the detection of all
connections to a Windows Server 2003 machine.
I already know to look here:
1) Administrative Tools --
Terminal Services Manger
2) Compuer Management --
System Tools --
Shared Folders
3)Microsoft SQL Servers--
(local) --
Management --
Current Activity
Where else might I look to find any other connections to Windows Server
2003?
Much thanks,
Jim
|
|
|
| Back to top |
|
|
Jim Moon
Guest
|
| Posted:
Sat Oct 22, 2005 12:50 am Post subject:
Re: How to Detect All Connections? |
|
|
Thanks, Steven. That sounds like great advice!
Jim
"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:%23NliJil1FHA.3180@TK2MSFTNGP14.phx.gbl...
| Quote: | Also consider looking in the security logs for logon events for users that
have authenticated or attempted to be authenticated to your computer. Use
Local Security Policy [secpol.msc] to make sure that auditing of logon
events is enabled for success and failure and be sure to increase the size
of the security log to at least 20MB as it is very small by default. ---
Steve
"Jim Moon" <please.reply@group> wrote in message
news:usCeRQO1FHA.2064@TK2MSFTNGP09.phx.gbl...
I'd like to know what system tools, etc., to use in the detection of all
connections to a Windows Server 2003 machine.
I already know to look here:
1) Administrative Tools --
Terminal Services Manger
2) Compuer Management --
System Tools --
Shared Folders
3)Microsoft SQL Servers--
(local) --
Management --
Current Activity
Where else might I look to find any other connections to Windows Server
2003?
Much thanks,
Jim
|
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in