<div>
Thanks, experts for the qucik and ready responses.<br />
I have not heard of Currports before this.<br />
I have found Wireshark a bit overwhelming for my lack of experience.<br />
Will certainly give Currports a go.<br />
Immediately, my attention is on a specific computer in a network which I suspect has been compromised by a spambot(s). Consequently, I need to monitor it for a period of time.<br />
Thus adding a filter for 25 will suffice. Packet contents are of no interest.<br />
May have to also add Outlook as an application because some spambots work through Outlook I understand.<br />
Your further comments will be most helpful as I may be way off course.<br />
Thanks
</div>


Thanks, experts for the qucik and ready responses.
I have not heard of Currports before this.
I have found Wireshark a bit overwhelming for my lack of experience.
Will certainly give Currports a go.
Immediately, my attention is on a specific computer in a network which I suspect has been compromised by a spambot(s). Consequently, I need to monitor it for a period of time.
Thus adding a filter for 25 will suffice. Packet contents are of no interest.
May have to also add Outlook as an application because some spambots work through Outlook I understand.
Your further comments will be most helpful as I may be way off course.
Thanks

<div>
That should do. But you have to let CurrPorts running on the &quot;offending&quot; machine, else you won't have process information available.
</div>


That should do. But you have to let CurrPorts running on the "offending" machine, else you won't have process information available.

<div>
<div class="content wysiwyg-content">
Is there a way to filter by one of the display fields of TCPView?<br />
For instance, if I were to filter by a given local port, say 25 and output the results to a text file over a period of time, would this be feasible?<br />
<br />
Any help or suggestion from an expert(s) would be most appreciated. Thanks
</div>
</div>


Is there a way to filter by one of the display fields of TCPView?
For instance, if I were to filter by a given local port, say 25 and output the results to a text file over a period of time, would this be feasible?

Any help or suggestion from an expert(s) would be most appreciated. Thanks

Filtering output from TCPView

Network Operations includes asset management, help-desk supervision, security and user policies, infrastructure administration and anything else that affects the operation of your network. Discussions will include those of best practices in platforms, configurations, performance, security and accounting.

Network Operations

Transmission Control Protocol/Internet Protocol (TCP/IP) is the set of networking protocols that define end-to-end connectivity specifying how data should be packeted, addressed, transmitted, routed and received at the destination. This functionality is organized into four abstraction layers which are used to sort all related protocols according to the scope of networking involved.