Active Connections Proto Local Address Foreign Address State TCP pdo-virtueel-xp:epmap pdo-virtueel-xp:0 LISTENING TCP pdo-virtueel-xp:microsoft-ds pdo-virtueel-xp:0 LISTENING TCP pdo-virtueel-xp:1025 pdo-virtueel-xp:0 LISTENING TCP pdo-virtueel-xp:5000 pdo-virtueel-xp:0 LISTENING TCP pdo-virtueel-xp:netbios-ssn pdo-virtueel-xp:0 LISTENING UDP pdo-virtueel-xp:epmap *:* UDP pdo-virtueel-xp:microsoft-ds *:* UDP pdo-virtueel-xp:isakmp *:* UDP pdo-virtueel-xp:1026 *:* UDP pdo-virtueel-xp:1031 *:* UDP pdo-virtueel-xp:ntp *:* UDP pdo-virtueel-xp:1900 *:* UDP pdo-virtueel-xp:ntp *:* UDP pdo-virtueel-xp:netbios-ns *:* UDP pdo-virtueel-xp:netbios-dgm *:* UDP pdo-virtueel-xp:1900 *:* Microsoft Windows XP [Version 5.1.2600] (C) Copyright 1985-2001 Microsoft Corp. C:\Documents and Settings\pdo>ls 'ls' is not recognized as an internal or external command, operable program or batch file. C:\Documents and Settings\pdo>type The syntax of the command is incorrect. C:\Documents and Settings\pdo>dir Volume in drive C has no label. Volume Serial Number is 3092-DD10 Directory of C:\Documents and Settings\pdo 12-11-2008 16:11 . 12-11-2008 16:11 .. 12-11-2008 16:16 Desktop 12-11-2008 10:39 Favorites 12-11-2008 10:39 My Documents 12-11-2008 10:55 Start Menu 12-11-2008 16:12 172 verslag73s.txt 1 File(s) 172 bytes 6 Dir(s) 545.454.080 bytes free C:\Documents and Settings\pdo>type verslag73s.txt Active Connections Proto Local Address Foreign Address State Active Connections Proto Local Address Foreign Address State C:\Documents and Settings\pdo>netstat -a >> tverslag73s.txt C:\Documents and Settings\pdo>type verslag73s.txt Active Connections Proto Local Address Foreign Address State Active Connections Proto Local Address Foreign Address State C:\Documents and Settings\pdo>netstat Active Connections Proto Local Address Foreign Address State C:\Documents and Settings\pdo>netstat -m Displays protocol statistics and current TCP/IP network connections. NETSTAT [-a] [-e] [-n] [-o] [-s] [-p proto] [-r] [interval] -a Displays all connections and listening ports. -e Displays Ethernet statistics. This may be combined with the -s option. -n Displays addresses and port numbers in numerical form. -o Displays the owning process ID associated with each connection. -p proto Shows connections for the protocol specified by proto; proto may be any of: TCP, UDP, TCPv6, or UDPv6. If used with the -s option to display per-protocol statistics, proto may be any of: IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP, or UDPv6. -r Displays the routing table. -s Displays per-protocol statistics. By default, statistics are shown for IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP, and UDPv6; the -p option may be used to specify a subset of the default. interval Redisplays selected statistics, pausing interval seconds between each display. Press CTRL+C to stop redisplaying statistics. If omitted, netstat will print the current configuration information once. C:\Documents and Settings\pdo>netstat -r >>demo.txt C:\Documents and Settings\pdo>type demo.txt =========================================================================== Interface List 0x1 ........................... MS TCP Loopback interface 0x2 ...00 0c 29 92 fd 9f ...... AMD PCNET Family PCI Ethernet Adapter - Packet S cheduler Miniport =========================================================================== =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.113 30 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 192.168.1.0 255.255.255.0 192.168.1.113 192.168.1.113 30 192.168.1.113 255.255.255.255 127.0.0.1 127.0.0.1 30 192.168.1.255 255.255.255.255 192.168.1.113 192.168.1.113 30 224.0.0.0 240.0.0.0 192.168.1.113 192.168.1.113 30 255.255.255.255 255.255.255.255 192.168.1.113 192.168.1.113 1 Default Gateway: 192.168.1.1 =========================================================================== Persistent Routes: None Route Table C:\Documents and Settings\pdo>ipconfig Windows IP Configuration Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : IP Address. . . . . . . . . . . . : 192.168.1.113 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.1.1 C:\Documents and Settings\pdo>fport -? 'fport' is not recognized as an internal or external command, operable program or batch file. C:\Documents and Settings\pdo>fport 'fport' is not recognized as an internal or external command, operable program or batch file. C:\Documents and Settings\pdo>ping 192.168.1.1 Pinging 192.168.1.1 with 32 bytes of data: Reply from 192.168.1.1: bytes=32 time=4ms TTL=150 Reply from 192.168.1.1: bytes=32 time<1ms TTL=150 Reply from 192.168.1.1: bytes=32 time<1ms TTL=150 Reply from 192.168.1.1: bytes=32 time<1ms TTL=150 Ping statistics for 192.168.1.1: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 4ms, Average = 1ms C:\Documents and Settings\pdo>.. '..' is not recognized as an internal or external command, operable program or batch file. C:\Documents and Settings\pdo>c: C:\Documents and Settings\pdo>cd\ FPORTGEDEELTE C:\>fport FPort v2.0 - TCP/IP Process to Port Mapper Copyright 2000 by Foundstone, Inc. http://www.foundstone.com Pid Process Port Proto Path 828 svchost -> 135 TCP C:\WINDOWS\system32\svchost.exe 4 System -> 139 TCP 4 System -> 445 TCP 928 svchost -> 1025 TCP C:\WINDOWS\System32\svchost.exe 1100 -> 5000 TCP 0 System -> 123 UDP 828 svchost -> 135 UDP C:\WINDOWS\system32\svchost.exe 0 System -> 137 UDP 0 System -> 138 UDP 4 System -> 445 UDP 928 svchost -> 500 UDP C:\WINDOWS\System32\svchost.exe 1100 -> 1026 UDP 4 System -> 1031 UDP 0 System -> 1041 UDP 0 System -> 1900 UDP