Solved

monitor and alert on specific TCP/IP port setting

Posted on 2014-04-13
7
547 Views
Last Modified: 2014-04-16
I have a need to alert me when a specific tcp port is opened, I don't want to block it just know when its opened.  What software, alert or batch file I can use to alert me with a notification of some sort that it has been active and connected with.
0
Comment
Question by:jo80ge121
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 40

Expert Comment

by:omarfarid
ID: 39998232
What is your platform?

You could use netstat to see LISTEN or ESTABLISHED status for specific ports
0
 

Expert Comment

by:jmathon
ID: 39998421
You can also use nagios to monitor a specific port, and alert you when the device is available.
0
 
LVL 27

Expert Comment

by:skullnobrains
ID: 39998556
you need to give information regarding your setup. are you trying to know if a port is opened on your local machine ? are you a firewall admin trying to see what your users are doing ? in that case what firewall do you use and do you have the ability to sniff the network from a remote machine ?
0
Salesforce Has Never Been Easier

Improve and reinforce salesforce training & adoption using WalkMe's digital adoption platform. Start saving on costly employee training by creating fast intuitive Walk-Thrus for Salesforce. Claim your Free Account Now

 
LVL 37

Expert Comment

by:bbao
ID: 39998670
generally, commonly there are two approaches to monitor and alert TCP/IP port usage.

1. host based. a port monitoring software is required to be installed on the host computer on which the target applications run. the software can be a simple software monitoring ports usage only or a comprehensive firewall software monitoring all stateful traffic.

2. external firewall based. full log mechanism such as syslog should be enabled on firewall to capture all essential information of the traffic between the source and destination hosts.

for both methods, if the logs can be collected and a port filter can be applied, you can see the result you are after.
0
 

Author Comment

by:jo80ge121
ID: 39998970
sorry all - the setup information is to be installed on a windows 7 pc not a external firewall.  We have this remote program we use in house that uses a specific port to gain access to a pc tcp 9345.  My technician staff have been told to call ahead before remoting in as a courtesy however I've been hearing different.  For certain end users I want to be able to put in a simple alert of some sort that the remote program is active on a pc so I can find out if the rumors are true.
0
 
LVL 27

Accepted Solution

by:
skullnobrains earned 500 total points
ID: 39999343
is is feasible through a script, but this tool should be easier to setup

http://www.addictivetips.com/windows-tips/attacker-a-tcpudp-port-listener/

you should be able to configure it to alert on connections to specific ports

personal firewalls such as commodo can also do such things easily
0
 

Author Closing Comment

by:jo80ge121
ID: 40004586
thank you. it should work just fine.
0

Featured Post

Webinar May 25: Cloud Security Strategies for SMBs

Small and mid-sized businesses are a driving force behind cloud adoption, and it’s no wonder: cloud benefits are BIG.  But for all the convenience that moving to the cloud provides, where does security come into play?

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question