MS Releases free port Logger

Called "Port Reporter" MS released a tool to log port activity on new generation OS platforms. It runs as a service in the background and logs access to ports and can profile usage.

Check it out here for the executable.

Quote:

---

The Port Reporter tool logs TCP and UDP port activity. The tool is a small program that runs as a service on a computer that is running Windows Server 2003, Windows XP, or Windows 2000.

On Windows Server 2003 and on Windows XP-based computers, the service can log the following information:
The ports that are used
The processes that use the port
Whether a process is a service
The modules that a process loaded
The user accounts that run a process

---

Full Overview

Ha!
Following the instructions that was provided here.

Just installed it, started the service, went to look at event logs and they are all corrupt!
They were just fine this morning... I looked at them just 10 min ago...

Anyone else have that problem?

BTW: I'm on XP Pro SP1, all available critical updates.

Hi Phish, I have same config.

NO Issue here, you did install as local box admin?

No insallation errors? There were about six different "Process Complete" dialogs on my install.

Did the event viewer get corrupt before or after starting the service? The default install is set to manual start.

I did install as local admin. I didn't check the event log after install. Just after I started the service. The system and app logs are corrupt. Not the security log.

I can't tell if there were any installation errors because the logs are corrupt. But, at time of install, it didn't display any.

Maybe I'll do a system rollback and try it again. :rolleyes:

No problems here Phissy. I looked over all three logs it created and the Event Viewer entries. All worked as described.

However, I popped it on a Win2003 server, not an XP workstation.

:D

Yes here too, Nothing in the app log but the successful start of the service.

Perhaps you can check the port reporter logs in system32/log files and see if it's a corrupt install? That thing can generat some significant log files for security profiling. Preliminary analysis indicates a useful tool.

Ok, finally got it working. I had to do a system roll back, then I reinstalled it just fine.

The logs are pretty good. Better than the scripts that I made with fport, netstat and pstools...

Cool little program. :)

Looks like a usefull tool!
Has anyone used it on a dual nic W2k MS ISA Server?

Can it log any other protocol usage, or just TCP/UDP?

"The Port Reporter tool logs TCP and UDP port activity"


-Maestr0

Good find

well it works just as find cam;t wait to try it out on a 2003 server !!!
good find road closed