On all of my computers, I'm seeing network activity on my net adapter
(flashing light) coordinated with disk activity, but not applications are
running. Now, I am running msn messenger, but not signed in. And of course,
dozens of processes of myriad names.
How can I tell just which processes are connected to the network, and which
are using it? I'm concerned that I have an unidentified spy or 'bot' process
running. Is there a log file or a monitor I can run? The standard monitor
shows virtually no activity.
--
Jim

security.live.com

fiddle in a cmd window
netstat /?
netstat /abo

"JimS" <JimS@discussions.microsoft.com> wrote in message
news:949955A3-6085-4688-AAAF-5B44F21FAB65@microsoft.com...
> On all of my computers, I'm seeing network activity on my net adapter
> (flashing light) coordinated with disk activity, but not applications are
> running. Now, I am running msn messenger, but not signed in. And of
> course,
> dozens of processes of myriad names.
> How can I tell just which processes are connected to the network, and
> which
> are using it? I'm concerned that I have an unidentified spy or 'bot'
> process
> running. Is there a log file or a monitor I can run? The standard monitor
> shows virtually no activity.
> --
> Jim

this program has a good interface that shows what processes are active

http://www.sysinternals.com/Utilities/TcpView.html

hth

philip ashley

"JimS" <JimS@discussions.microsoft.com> wrote in message
news:949955A3-6085-4688-AAAF-5B44F21FAB65@microsoft.com...
> On all of my computers, I'm seeing network activity on my net adapter
> (flashing light) coordinated with disk activity, but not applications
> are
> running. Now, I am running msn messenger, but not signed in. And of
> course,
> dozens of processes of myriad names.
> How can I tell just which processes are connected to the network, and
> which
> are using it? I'm concerned that I have an unidentified spy or 'bot'
> process
> running. Is there a log file or a monitor I can run? The standard
> monitor
> shows virtually no activity.
> --
> Jim

A firewall such as Zone Alarm monitors traffic both ways, if
you don't give a program blanket permission, it will trigger
a pop up prompt when a programs seeks Internet/LAN access
(this would be session-logon permission).
Also a LAN will have traffic as the NIC will be sending out
signals to let the network know it is there, kind of like a
bunch of Girl Scouts on a camping trip, shouting from tent
to tent.



--
The people think the Constitution protects their rights;
But government sees it as an obstacle to be overcome.
some support
http://www.usdoj.gov/olc/secondamendment2.htm



"Philip Ashley" <philip.ashleyRE@MOVEntlworld.com> wrote in
message news:vfBbf.3509$c66.1196@newsfe3-gui.ntli.net...
| this program has a good interface that shows what
processes are active
|
| http://www.sysinternals.com/Utilities/TcpView.html
|
| hth
|
| philip ashley
|
| "JimS" <JimS@discussions.microsoft.com> wrote in message
| news:949955A3-6085-4688-AAAF-5B44F21FAB65@microsoft.com...
| > On all of my computers, I'm seeing network activity on
my net adapter
| > (flashing light) coordinated with disk activity, but not
applications
| > are
| > running. Now, I am running msn messenger, but not signed
in. And of
| > course,
| > dozens of processes of myriad names.
| > How can I tell just which processes are connected to the
network, and
| > which
| > are using it? I'm concerned that I have an unidentified
spy or 'bot'
| > process
| > running. Is there a log file or a monitor I can run? The
standard
| > monitor
| > shows virtually no activity.
| > --
| > Jim
|

Interesting...thanx for the lead. Seems like maybe LSASS, from Microsoft.
--
Jim


"bumtracks" wrote:

> security.live.com
>
> fiddle in a cmd window
> netstat /?
> netstat /abo
>
> "JimS" <JimS@discussions.microsoft.com> wrote in message
> news:949955A3-6085-4688-AAAF-5B44F21FAB65@microsoft.com...
> > On all of my computers, I'm seeing network activity on my net adapter
> > (flashing light) coordinated with disk activity, but not applications are
> > running. Now, I am running msn messenger, but not signed in. And of
> > course,
> > dozens of processes of myriad names.
> > How can I tell just which processes are connected to the network, and
> > which
> > are using it? I'm concerned that I have an unidentified spy or 'bot'
> > process
> > running. Is there a log file or a monitor I can run? The standard monitor
> > shows virtually no activity.
> > --
> > Jim
>
>
>