| View previous topic :: View next topic |
| Author |
Message |
SpyWarrior
Junior Member
Joined: 20 Dec 2004
Last Visit: 07 Mar 2005
Posts: 14
|
 Posted: Mon Dec 20, 2004 1:00 pm Post subject: 56K data transfering monitor |
 |
|
Greeting fellow. Anyone here on Dial-up? Is it normal to have data transfered let's say 1k?? as in "sent" when you check the internet status?
What I mean is:
------------------------------------
Activity
sent: received
bytes 1,000, 350
compression 14% 3%
Error 0 1
Is there any software that allows me to see what data is being sent out and in? |
|
| Back to top |
|
 |
Obeahman
Junior Member
Joined: 14 Dec 2004
Last Visit: 15 Mar 2009
Posts: 11
|
| Posted: Tue Dec 21, 2004 5:52 pm Post subject: |
|
|
Check out the link below.....
| Code: |
| http://www.pcplus.co.uk/downloads/default.asp?pagetypeid=2&articleid=7729&subsectionid=365&subsubsectionid=7 |
Is this what you are referring to?
Obeah
 |
|
| Back to top |
|
|
SpyWarrior
Junior Member
Joined: 20 Dec 2004
Last Visit: 07 Mar 2005
Posts: 14
|
| Posted: Wed Dec 22, 2004 5:46 am Post subject: |
|
|
Thank! I love you man.
Now I can find out whose the big brother is. |
|
| Back to top |
|
|
mikey
Malware Expert
Joined: 12 Feb 2004
Last Visit: 03 Sep 2012
Posts: 1061
Location: CenTex
|
| Posted: Wed Dec 22, 2004 8:14 am Post subject: |
|
|
I'm only guessing as your vanacular was unclear but I think what you want is a good netstat tool. Your firewall should offer you netstat...most do...does yours not do that?
If netstat is what you need and you aren't actually looking to examine each packet (sniffing), I would suggest my fav netstat tool; http://www.sysinternals.com/ntw2k/source/tcpview.shtml It maps process to port and allows the user control over termination of the process or the connection. HTH
_________________
-
W2K/2K3/XP/2K8/Vista/W7/RHE/DEBIAN/SUSE
Spyware/Adware is NOT freeware, it costs all of us dearly.
Mikey's Stuff
Fiddler and friends...essential web diagnostic, forensic, & development tools.
- |
|
| Back to top |
|
|
SpyWarrior
Junior Member
Joined: 20 Dec 2004
Last Visit: 07 Mar 2005
Posts: 14
|
| Posted: Wed Dec 22, 2004 2:21 pm Post subject: |
|
|
Thank! I love you too!
Well what I want to know is where the data is sending to and what "kind" of data is sending. I wasn't aware that i'm receiving lots of byte (but sending is less) until I downloaded nettraffic. |
|
| Back to top |
|
|
Moore
Moderator
Joined: 31 May 2004
Last Visit: 05 Jan 2011
Posts: 758
Location: °°.MooreLand.°°
|
| Posted: Fri Dec 24, 2004 1:01 am Post subject: |
|
|
| Quote: |
| Well what I want to know is where the data is sending to and what "kind" of data is sending |
Are you talking about the packets being sent / recieved each time you connect to a website , or while you computer is idle its sending and recieving packets on it's own.?
Normally [ when you arent infected  ] , you are likely to have regular connections with your ISP DNS servers which resolve IP addresses into domain names so you can connect to websites etc...
If you have DHCP [ dynamic host configuration protocol ] enabled which will assign an IP address to you during your online sesssion , add that to the possible connections you will be seeing...
You'll most likely see many ICMP connections from your ISP [ and others] checking your online status , and there are many kinds of worms and viruses that scan the internet like that msblast virus you were infected with, not to mention trojans / bots scanning for new victims.. 
You may have also netbios file and printer sharing enabled over TCP/IP , which should be disabled in your network connection properties , otherwise it opens your computer wide up to all kinds of people who like to scan for these types of unprotected systems..
| Quote: |
| Is there any software that allows me to see what data is being sent out and in? |
You should think about investing in a free firewall such as Outpost , Kerio , sygate or zonealarm , which are all fairly decent free firewalls to begin with Spywarrior..
Then you will find you have a lot more control over the inbound and outbound connections and protocols you want to allow and block , instead of relying on the windows firewall for its limited protection.
For more info on firewalls etc , try my firewall guide link that I posted in your LED thread :
http://www.spywarewarrior.com/viewtopic.php?t=8688
_________________
| Stop Malvertising | Outpost | Blocklist Pro | Hosts | |
|
| Back to top |
|
|
|
