Find port of software

I have a piece of software that is going out to a server looking for licensing.  While this is fine and dandy, the manufacturer of the software has basically disappered, but the software still works, providing I allow my firewall to have ALL ports open.  Thus, I am looking for a monitoring device or piece of software to simply run and tell me when the software is being used, what port number is being called.  I have tried some MS tools like NetStat with no help.
LVL 2
chrisryhalAsked:
Who is Participating?
 
MarakushConnect With a Mentor Commented:
http://www.ethereal.com

You might have to install wincap with it the instructions are on the site. I would suggest shutting everything down and starting the software you need to find the port of.

Also you might want to try a firewall software like blackice, turn on your software and it will tell you program XXX is trying to access the internet and look at the details of what port it is trying to use.

Marakush
0
 
fruhjConnect With a Mentor Commented:
Winternals has a utility that will show open endpoints of software, and it doesn't require any special drivers.
http://www.sysinternals.com/Utilities/TcpView.html
0
 
ISoulConnect With a Mentor Commented:
May I suggest Active Ports?

http://www.snapfiles.com/get/activeports.html
0
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

 
Steve KnightConnect With a Mentor IT ConsultancyCommented:
netstat -an from a command prompt does tell you what is going on at the moment.  Ethereal is great stuff and armed with a packet trace you can see exactly goes on between the devices, or you can use Network monitor or install a personal firewall such as Zone Alarms or Tiny firewall.

0
 
Steve KnightIT ConsultancyCommented:
If you have XP try netstat -anbv and look for the PID of your application (see task manager) and it will also show you the modules which are using the ports...
0
 
giltjrConnect With a Mentor Commented:
Umm does your firewall log all traffic that it denies?  If so check out the log.  Otherwise a packet capture utility like Ethereal, or its replacement Wireshark (http://www.wireshark.org) running on the computer that is running the software.
0
 
Rob WilliamsConnect With a Mentor Commented:
To elaborate on netstat, using    netstat  -b     at a command line with return a list of TCP connections and their state.
Run the application with the firewall disabled. Then run   netstat  -b   look for "ESTABLISHED" connections. On the line below it will show the application such as [Outlook.exe] that has the connection. You can then look under Local Address and Foreign address for that connection and the connected local and foreign ports will be displayed as
 Computername : port #
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.