Use a opção -b
no comando ' netstat
' do Windows para mostrar qual programa está escutando
-a Displays all connections and listening ports.
-b Displays the executable involved in creating each connection or
listening port. In some cases well-known executables host
multiple independent components, and in these cases the
sequence of components involved in creating the connection
or listening port is displayed. In this case the executable
name is in [] at the bottom, on top is the component it called,
and so forth until TCP/IP was reached. Note that this option
can be time-consuming and will fail unless you have sufficient
permissions.
Geralmente, são apenas aplicativos do tipo servidor que atendem conexões de entrada. No entanto, o Windows também possui serviços que escutam as transmissões de NETBIOS e outros tipos de conversas na rede do MS.
C:\> netstat -ab
Active Connections
Proto Local Address Foreign Address State PID
TCP Boxname:http Boxname:0 LISTENING 1708
[Apache]
TCP Boxname:netbios-ssn Boxname:0 LISTENING 4
[System]
…