Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've been asked to compile a list of TCP/UDP and ports they use for the collection of application that comprise our product for a client who wants the information for their firewall.

So I fired up TCPView some of the processes are so short lived that I can't register the information fast enough and there is seemingly no way of recording it. I tried Capsa Free which records the connection but doesn't record the process - they seem to expect you to match it up manually via the PID.

Is there an application that will record the process, the protocol and teh local port it used for later consumption.

I'd rather not manually dig through the source to find which application/dll uses what.

share|improve this question
1  
If it's your product can't you just consult the design documentation or ask the devs/designers ? –  Iain Dec 15 '11 at 12:26
    
design documents. good one. –  Sirex Dec 15 '11 at 12:39
    
The software has been organically grown over 11 years and despite the intial flurry of design, mostly it has been reactive to customer requirements. –  graham.reeds Dec 15 '11 at 13:25
add comment

2 Answers

Use Windump or Wireshark to save the trace to a file, then analyze the output. Wireshark's statistical functions like "protocol hierarchy" or "conversations" might be of some help here.

share|improve this answer
add comment

Microsoft Network Monitor will do exactly that.

share|improve this answer
    
It's a better solution than wireshark in this case because it will allow you to select the traffic per application (which Wireshark/winpcap cannot do) –  Stephane Dec 15 '11 at 14:00
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.