Network scanner software [Archive]

htsource

10-19-2008, 04:02 PM

Just wondering if there's any networking software out there that can detect outgoing traffic? Say I'm trying to find out the name of a virus that a computer is infected with, it would be nice to know what port and host it's trying to contact.

If anyone has any suggestions, that'd be great.

acs

10-19-2008, 04:36 PM

Bring up a command prompt then

netstat

Gives you some indication

Or use a software firewall such as zone alarm

thecoldone06

10-20-2008, 01:43 PM

If you want to get to the packet level, you can use Wireshark (http://www.wireshark.org/).

MrMille

10-20-2008, 02:15 PM

Just wondering if there's any networking software out there that can detect outgoing traffic? Say I'm trying to find out the name of a virus that a computer is infected with, it would be nice to know what port and host it's trying to contact.

If anyone has any suggestions, that'd be great.

You are going about this the wrong way.
Does the virus do anything? any text you could google?

tkrabec

10-23-2008, 02:55 PM

Snort, or another IPS/IDS, or egress filtering/scanning. That is a fairly mature sector of the market.

Jager

10-23-2008, 03:33 PM

CurrPorts will show what ports are currently open and by what executables.