Warning: krsort() expects parameter 1 to be array, null given in /home/.fluke/nuno_brito/boot-land.net/forums/sources/d22mods/mvtt.php on line 58

Warning: reset() [function.reset]: Passed variable is not an array or object in /home/.fluke/nuno_brito/boot-land.net/forums/sources/d22mods/mvtt.php on line 59
Intrusion Detection Tools - Boot Land
 
Digg this topic Add to my del.icio.us Submit to SlashDot  
Reply to this topicStart new topic
> Intrusion Detection Tools, protecting your machine from intruders
Nuno Brito
post Sep 28 2007, 11:35 PM
Post #1


Advanced Member
***

Group: .script developer
Posts: 4,255
Joined: 13-July 06
From: Azores
Member No.: 1


Portugal


QUOTE
Fport

Identify unknown open ports and their associated applications
Copyright 2002 © by Foundstone, Inc.
http://www.foundstone.com

fport supports Windows NT4, Windows 2000 and Windows XP

fport reports all open TCP/IP and UDP ports and maps them to the owning application. This is the same information you would see using the 'netstat -an' command, but it also maps those ports to running processes with the PID, process name and path. Fport can be used to quickly identify unknown open ports and their associated applications.


This one is quite handy and will display all open connections (just like netstat) but will also link back to the executables that are making use of the ports.



----------------

QUOTE
MydoomScanner is a Windows GUI scanner tailored specifically to finding Microsoft Windows systems infected with the Mydoom worm.


http://www.foundstone.com/us/resources/ter...doomscanner.zip


Remove tool from symantec:

http://www.symantec.com/security_response/...-012710-0202-99
http://www.symantec.com/content/en/us/glob...ps/FxMydoom.exe

-------------------

Also recommend downloading a few firewall tools just to ensure your ports are kept under control.

Googling for "firewall" should help retrieving some good freeware products.

smile.gif


--------------------
Use the search tool to find all posts made by other members and help you solve any doubts quickly by yourself.
Whenever possible - place your questions including as many details as you can to help us help you - Thanks!

nuno? --> pics
Go to the top of the page
 
+Quote Post
Galapo
post Sep 29 2007, 12:12 AM
Post #2


Advanced Member
***

Group: Advanced user
Posts: 191
Joined: 16-July 06
From: Sydney
Member No.: 11


Australia


QUOTE (Nuno Brito @ Sep 29 2007, 09:35 AM) *
Also recommend downloading a few firewall tools just to ensure your ports are kept under control.

Googling for "firewall" should help retrieving some good freeware products.

This one here is apparently quite good: http://www.personalfirewall.comodo.com/

My brother is using it and is finding it to be great. I think I'll start using it when my ZoneAlarm subscription expires again, esp. because ZoneAlarm makes my bootup time to be horrendous and no matter what configuring I do won't alleviate the problem. Maybe in time I'll try to do up a script for it...

Regards,
Galapo.


--------------------
Go to the top of the page
 
+Quote Post
Nuno Brito
post Sep 29 2007, 11:37 AM
Post #3


Advanced Member
***

Group: .script developer
Posts: 4,255
Joined: 13-July 06
From: Azores
Member No.: 1


Portugal


What a fun coincidence..

It's actually the one firewall I liked best after trying a few free firewall products.

Didn't solved completely my issue since I still have a few open ports just listening without aparent reasons, but at the very least has a good UI and is quite extensive debugging whatever happens over the network ports.

Really nice. thumbup.gif


--------------------
Use the search tool to find all posts made by other members and help you solve any doubts quickly by yourself.
Whenever possible - place your questions including as many details as you can to help us help you - Thanks!

nuno? --> pics
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic

Members Who Viewed Topic Today ()

 

RSS Lo-Fi Version Time is now: 24th October 2007 - 08:32 AM

MKPortal ©2003-2006 mkportal.it