I needed to show all the connections on a virus infected machine a while ago, and being a Microsoft tech, I normally used the Sysinternals TCPViewer tool to do this…
However, TCPViewer is a bit limited. I mean, I’m trying to track all the connections on a given port, say, SMTP port 25, but I have to sort through EVERY connection…
Then I found Nirsoft’s CurrPorts tool. It’s basically TCPViewer on acid. Of most importance to me, is the ability to filter the connections, which CurrPorts doesn’t brilliantly.
You can find it over here – http://www.nirsoft.net/utils/cports.html