Windows ports

There are many tools that can be used to monitor ports on a windows system. We will look at a program called fport. Bellow are instructions on how to use fport to find what ports are open on your system, what process is using the port and the path to its executable.

1. Download fport
   
   
2. Install fport in the C:\WINDOWS\system32 folder (this will allow you to run fport from anywhere)
   
   
3. Click Start , and then click Run .
   
   

   Click Run

   
   
4. In the box, type cmd, and then click OK .
   
   

   Click OK

   
   
5. In the window that opens type fport and then press Return.
   
   

   Type fport then press Return

This command will list all the above mentioned information. This information can be used to monitor the systems active ports. This can be very useful in determining whether an unauthorised process is using an unauthorised port to communicate with an unknown system / device.

If you do not recognise a process from this list visit the Windows Processes guide of this site. If this does not help try searching on the Internet for more information. If you still cannot find any useful information report the incident to the GLA-CERT team who will investigate and advise you on any actions to take.