Yo Grep this.

A couple of weeks ago, I ran into this article at InformationWeek, titled ‘The Best Software Ever Written’. It read as one of those novels that have a true climax at the end:

So there you have it: The single Greatest Piece of Software Ever, with the broadest impact on the world, was BSD 4.3. Other Unixes were bigger commercial successes. But as the cumulative accomplishment of the BSD systems, 4.3 represented an unmatched peak of innovation. BSD 4.3 represents the single biggest theoretical undergirder of the Internet. Moreover, the passion that surrounds Linux and open source code is a direct offshoot of the ideas that created BSD: a love for the power of computing and a belief that it should be a freely available extension of man’s intellectual powers–a force that changes his place in the universe.

Which brings me by today’s Windows investigative tricks. Without a doubt, all Unix systems come with tools that allow administrators to easily find out (and kill) running processes that are running amuck. As usual, for the Windows platform, most of these kind of tools are generally ‘hidden’ in extra ‘Developers SDKs’, or worse, only available from third-parties, where in some case you have to pay for that extra functionality you do in a whirl under any Unix system. In some cases, Windows developers actually took over some commands from Unix, albeit mostly limited.

One Netstat goes nothose tools is ‘netstat’, which you can execute if you open up a DOS box. Netstat is a program that shows current network connections. As every other DOS program, it has several command switches (try ‘netstat –help’) available to list specific things. UNIX users are probably familiar with the ‘-an’ option.

The TasklistThe most interesting switch is actually ‘-o’, which as the ‘help file’ says ‘Displays the owning process ID associated with each connection’. Notice the extra PID column? If you open up TaskManager (taskmgr.exe), you can now pinpoint which application connected to a specific port and address. Note that you may need to add this extra column: Go to Taskmanager’s View menu, click ‘Select columns’ and add the item called ‘PID’ .

This entry was posted in Hyperlinks, Ordinateurs. Bookmark the permalink.