 |
在xp和2003下察看端口对应的进程 |
|
|
| 在xp和2003下察看端口对应的进程 |
|
| 作者：佚名 文章来源：不详 点击数： 更新时间：2007-1-23 16:24:47 |
|
我们都知道fport.exe只能在2000下运行，那么有没有办法在xp和2003下察看端口对应的信息呢？答案是肯定的:)
首先让我们来熟悉几条命令和程序的用法吧：
netstat -ano //这个命令是列出当前网络连接状况，并且列出端口对应程序的pid
tlist.exe //在2000和xp安装盘的Support/Tools目录下，support.cab 压缩包自带的一个工具，可以查看指定pid对应的进程信息
让我们来看看运行效果吧
以下是netstat-ano在cmd中的运行结果:
Active Connections
Proto Local Address Foreign Address State PID
TCP 0.0.0.0:42 0.0.0.0:0 LISTENING 1524
TCP 0.0.0.0:80 0.0.0.0:0 LISTENING 1616
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING 660
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING 4
TCP 0.0.0.0:1025 0.0.0.0:0 LISTENING 496
TCP 0.0.0.0:1026 0.0.0.0:0 LISTENING 984
TCP 0.0.0.0:1031 0.0.0.0:0 LISTENING 1576
TCP 0.0.0.0:1033 0.0.0.0:0 LISTENING 1524
TCP 0.0.0.0:1433 0.0.0.0:0 LISTENING 1316
TCP 0.0.0.0:1801 0.0.0.0:0 LISTENING 1576
TCP 0.0.0.0:2103 0.0.0.0:0 LISTENING 1576
TCP 0.0.0.0:2105 0.0.0.0:0 LISTENING 1576
TCP 0.0.0.0:2107 0.0.0.0:0 LISTENING 1576
TCP 0.0.0.0:3389 0.0.0.0:0 LISTENING 724
TCP 0.0.0.0:4899 0.0.0.0:0 LISTENING 2860
TCP 127.0.0.1:43958 0.0.0.0:0 LISTENING 1476
TCP 202.194.4.218:21 0.0.0.0:0 LISTENING 1476
TCP 202.194.4.218:80 202.194.4.218:3768 ESTABLISHED 4
TCP 202.194.4.218:1433 211.233.12.64:8374 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:8716 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:9075 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:9430 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:9785 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:10750 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:11091 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:11418 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:11739 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:12093 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:12452 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:15486 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:15851 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:16223 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:16580 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:16928 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:17283 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:17635 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:18005 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:18372 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:18746 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:19077 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:19453 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:19827 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:20199 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:20601 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:20951 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:21295 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:22194 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:22505 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:23517 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:23883 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:24245 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:24584 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:24920 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:25257 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:25676 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:26009 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:26345 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:26719 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:27724 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:28607 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:28950 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:29280 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:29582 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:29931 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:30299 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:30635 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:31003 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:31965 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:32317 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:33716 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:34076 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:34447 TIME_WAIT 0
TCP 202.194.4.218:1433 211.233.12.64:34735 FIN_WAIT_1 1316
TCP 202.194.4.218:3389 219.218.104.91:1065 ESTABLISHED 724
TCP 202.194.4.218:3768 202.194.4.218:80 ESTABLISHED 3172
TCP 202.194.4.218:3771 66.94.230.51:80 TIME_WAIT 0
TCP 202.194.4.218:3772 66.94.230.37:80 TIME_WAIT 0
UDP 0.0.0.0:42 *:* 1524
UDP 0.0.0.0:445 *:* 4
UDP 0.0.0.0:500 *:* 496
UDP 0.0.0.0:1029 *:* 860
UDP 0.0.0.0:1030 *:* 1576
UDP 0.0.0.0:1032 *:* 1524
UDP 0.0.0.0:1434 *:* 1316
UDP 0.0.0.0:1645 *:* 876
UDP 0.0.0.0:1646 *:* 876
UDP 0.0.0.0:1812 *:* 876
UDP 0.0.0.0:1813 *:* 876
UDP 0.0.0.0:1837 *:* 860
UDP 0.0.0.0:1886 *:* 860
UDP 0.0.0.0:1887 *:* 860
UDP 0.0.0.0:1888 *:* 860
UDP 0.0.0.0:1889 *:* 860
UDP 0.0.0.0:1890 *:* 860
UDP 0.0.0.0:1891 *:* 860
UDP 0.0.0.0:1892 *:* 860
UDP 0.0.0.0:3527 *:* 1576
UDP 0.0.0.0:4000 *:* 2840
UDP 0.0.0.0:4500 *:* 496
UDP 0.0.0.0:6000 *:* 2840
UDP 0.0.0.0:6001 *:* 2840
UDP 127.0.0.1:123 *:* 876
UDP 127.0.0.1:1027 *:* 876
UDP 127.0.0.1:1028 *:* 876
UDP 127.0.0.1:1180 *:* 2496
UDP 127.0.0.1:2920 *:* 2476
UDP 127.0.0.1:3546 *:* 1904
UDP 127.0.0.1:3798 *:* 3400
UDP 127.0.0.1:3877 *:* 2312
UDP 202.194.4.218:123 *:* 876
最后一列就是PID了
//---------------------------------------------------------------------------
以下是tlist.exe的运行结果:tlist.exe的用法是:tlist.exe pid
譬如:tlist.exe 1524 其结果如下:
1524 wins.exe
CWD: C:/WINDOWS/system32/
CmdLine: C:/WINDOWS/System32/wins.exe
VirtualSize: 77372 KB PeakVirtualSize: 78212 KB
WorkingSetSize: 2604 KB PeakWorkingSetSize: 6768 KB
NumberOfThreads: 18
1528 Win32StartAddr:0x0101249a LastErr:0x000003e5 State:Waiting
1544 Win32StartAddr:0x77d7570d LastErr:0x000003e5 State:Waiting
1828 Win32StartAddr:0x69a6ef20 LastErr:0x00000000 State:Waiting
1832 Win32StartAddr:0x69a6ef20 LastErr:0x00000000 State:Waiting
1836 Win32StartAddr:0x69a6ef20 LastErr:0x00000000 State:Waiting
1840 Win32StartAddr:0x69a6ef20 LastErr:0x00000000 State:Waiting
1972 Win32StartAddr:0x01003e1a LastErr:0x00000000 State:Waiting
1976 Win32StartAddr:0x01003fc7 LastErr:0x00000000 State:Waiting
1980 Win32StartAddr:0x01007b95 LastErr:0x00000000 State:Waiting
1984 Win32StartAddr:0x0101d872 LastErr:0x00000000 State:Waiting
1988 Win32StartAddr:0x01020137 LastErr:0x00000000 State:Waiting
1996 Win32StartAddr:0x01014d48 LastErr:0x00000000 State:Waiting
2000 Win32StartAddr:0x01013a15 LastErr:0x00000000 State:Waiting
2004 Win32StartAddr:0x01006a10 LastErr:0x00000000 State:Waiting
2008 Win32StartAddr:0x77c30840 LastErr:0x00000102 State:Waiting
2012 Win32StartAddr:0x77c30840 LastErr:0x00000000 State:Waiting
2508 Win32StartAddr:0x06001cb7 LastErr:0x00000000 State:Waiting
2272 Win32StartAddr:0x00000000 LastErr:0x000003f0 State:Waiting
5.2.3790.99 shp 0x01000000 wins.exe
5.2.3790.0 shp 0x77f30000 ntdll.dll
5.2.3790.0 shp 0x77e10000 kernel32.dll
7.0.3790.0 shp 0x77b70000 msvcrt.dll
5.2.3790.0 shp 0x77d60000 ADVAPI32.dll
5.2.3790.137 shp 0x77c20000 RPCRT4.dll
5.2.3790.0 shp 0x71ba0000 NETAPI32.dll
5.2.3790.73 shp 0x77cd0000 USER32.dll
5.2.3790.0 shp 0x77bd0000 GDI32.dll
5.2.3790.0 shp 0x71b60000 WS2_32.dll
5.2.3790.0 shp 0x71b50000 WS2HELP.dll
5.2.3790.138 shp 0x77150000 ole32.dll
5.2.3790.0 shp 0x5bb80000 VSSAPI.DLL
3.5.2283.0 shp 0x769c0000 ATL.DLL
5.2.3790.0 shp 0x770d0000 OLEAUT32.dll
5.2.3790.0 shp 0x76180000 IMM32.DLL
5.2.3790.0 shp 0x63090000 LPK.DLL
1.421.3790.0 shp 0x72ee0000 USP10.dll
5.2.3790.0 shp 0x71a80000 mswsock.dll
5.2.3790.0 shp 0x71a40000 wshtcpip.dll
5.2.3790.0 shp 0x76e30000 DNSAPI.dll
5.2.3790.0 shp 0x76ed0000 winrnr.dll
5.2.3790.0 shp 0x76e70000 WLDAP32.dll
5.2.3790.0 shp 0x76ee0000 rasadhlp.dll
5.2.3790.0 shp 0x699b0000 esent.dll
5.2.3790.0 shp 0x5d000000 SAMLIB.dll
2001.12.4720.130 s 0x76ef0000 CLBCatQ.DLL
2001.12.4720.0 shp 0x76f70000 COMRes.dll
5.2.3790.0 shp 0x77b60000 VERSION.dll
2001.12.4720.130 s 0x76a10000 es.dll
5.2.3790.0 shp 0x76eb0000 secur32.dll
16.0.0.19 shp 0x06000000 ApiHook.dll
16.2.0.6 shp 0x05000000 MemMon.dll
很显然CmdLine:后面的就是程序的路径【转自世纪安全网 http://www.21safe.com】
|
|
| 文章录入：admin 责任编辑：admin |
|
|
上一篇文章： Win xp中的网桥
下一篇文章： 计算机互连之XP与XP篇 |
|
|
| 【字体：小 大】【发表评论】【加入收藏】【告诉好友】【打印此文】【关闭窗口】 |
|
|
 网友评论：（只显示最新10条。评论内容只代表网友观点，与本站立场无关！） |
|
|
|
|
|
