Crate a label or report for certain ports being used
is it possible to create a label or report that looks for a certain port that is being used? We have a software that connects of a few various ports and we would like to know how may workstations connect on certain ports. For example all workstations with the open port of 8601 going to IP xxx.xxx.xxx.xxx, but the ip address part is not as important as just knowing the workstations using specific ports. I have tried creating a label looking for open port # but it does not return any results.
Thank you
1 Comment
[ + ] Show comment
Answers (1)
Answer Summary:
Please log in to answer
Posted by:
SMal.tmcc
9 years ago
That is easy if you use a CIR to look for that info.
The target (foreign address) is the key to solving your problem. Since the source port can vary but the foreign address and port remains constant you create a CIR to look for connections to that ip:port or DNSname:port.
In this example I want to find all machines that attach to my kbox port 52230 and see what ports the source machines are using.
First do a netstat -a on a machine you know is attached to the server you want to look for a connection too
I see the machine is talking to the KBox on port 52230
Create a CIR to run net stat and filter for that server only.
Create a wizard report on the cir and filter for is not null and contains the source port of your desire.
The target (foreign address) is the key to solving your problem. Since the source port can vary but the foreign address and port remains constant you create a CIR to look for connections to that ip:port or DNSname:port.
In this example I want to find all machines that attach to my kbox port 52230 and see what ports the source machines are using.
First do a netstat -a on a machine you know is attached to the server you want to look for a connection too
I see the machine is talking to the KBox on port 52230
Create a CIR to run net stat and filter for that server only.
Create a wizard report on the cir and filter for is not null and contains the source port of your desire.
It'll take some work to get it there. - AFCUjstrick 9 years ago