Tempest: You can use fport to identify PIDS and app's that own them

http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subcontent=/resources/proddesc/fport.htm