Isso seria o mais leve possível (pegada de memória de ambos os programas: cerca de 5 MB):
Nirsoft's CurrPorts is network monitoring software that displays the list of all currently opened TCP/IP and UDP ports on your local computer. For each port in the list, information about the process that opened the port is also displayed, including the process name, full path of the process, version information of the process (product name, file description, and so on), the time that the process was created, and the user that created it.
In addition, CurrPorts allows you to close unwanted TCP connections, kill the process that opened the ports, and save the TCP/UDP ports information to HTML file , XML file, or to tab-delimited text file.
CurrPorts also automatically mark with pink color suspicious TCP/UDP ports owned by unidentified applications (Applications without version information and icons)
CurrPorts é freeware e portátil (não requer instalação).
Se você está procurando um aplicativo de firewall 'real' para o XP, dê uma olhada em iSafer (uma versão portátil está disponível aqui ).
iSafer é freeware gratuito de código aberto.