X-NetStat Professional User`s Manual
Contents
1. When checked X oani NetStat will attempt to resolve all IP addresses Packet Sniffer V Use advanced API winXP only to a hostname iw Automatically lookup hostnames Advanced wy Cache DNS Use Advanced API When checked X NetStat Eat opan will display the process EXE behind each connection in the Connection Table Edit DWS Cache Clear DNS Cache Cache DNS Stores the results of an IP to w Sites RES e ln SET hostname lookup for future reference Speeds Start in System Tray up the application Iw Check For 4 NetStat Updates Edit DNS Cache Run X NetStat at Windows StartLip Opens the DNS Cache in Notepad for manual editing Clear DNS Cache Clears the cache and looks up every IP address from scratch Cancel Load Default values Show X NetStat Tips Displays helpful tips Click Load Default Values link to revert to X NetStat s default and hints on how to use X NetStat when the settings the settings used on the first install program starts Start in system tray When checked X NetStat will start minimized to the system tray Check for X NetStat Updates Checks Fresh Software s website on startup to make sure you are running the latest version of X NetStat Run X NetStat at Windows startup Loads X NetStat every time Windows starts X NetStat Professional 5 3 User s Manual Page 15 of 38 Connection Table Options Options Font Picks the font face the size color and NetSt2. Notes amp Mozilla FireFox a Hybrid Dc Edit programs Run Click Add to add a new program file to the list A window will appear asking for the location of the file folder or URL and a name to give it When you click this item in the Programs dropdown menu shown above the program file or URL will launch ViewBar Options Enable ViewBar When checked X NetStat shows the ViewBar by default Start Docked to The initial dock location of the ViewBar Autohide Hides the ViewBar at the very top or bottom unless the mouse Is hovered over it Slide Effect Animate the ViewBar when it is changing position Blend Connections An alternate style to show the ViewBar in Show transmission lights Shows transmission LEDs the same ones on the status bar Show Clock Displays the time on the ViewBar Autoscroll connections When checked each connection is shown for a specified time and then the next connection is shown X NetStat Professional 5 3 User s Manual Page 17 of 38 Options NetStat Options gt General Connection Table Programs Viewbar Remote Access Logging Advanced Extra Options Cancel Options NetStat Options gt General Connection Table Programs Wiewbar Remote Access Logging Advanced oo Extra Options Cancel Programs xbernal Programs Command Prompt Fiw INDO Sisystemazicmd
3. The Process Information dialog displays the EXE file and location the program icon and version information Click the Actions button for a list of actions to 1 Terminate Process Stops the program and removes it from memory 2 Restart Process Terminates and then re runs a program 3 Open containing folder Display the folder directory where the EXE file is located 4 Google Search Performs a Google search on the EXE filename Process Information aim e He o FiFrogram Files 41h195 ain exe Product Name SOL Instant Messenger Product Version 5 5 3572 Company America Online Inc Copyright Copyright 1996 2004 America Online Inc Internal Mame AIM Description AOL Instant Messenger Comments Modified zih z004 3 29 24 PM File version 5 5 3572 Actions Warnings will be displayed unless you check Don t Warn when Terminating Restarting in Extra Options Process Information is also available in the InfoPanel under the Process Info tab X NetStat Professional 5 3 User s Manual Page 8 of 38 Port Information Window X NetStat displays a local port and a remote port for each connection each a number between 1 and 65 435 Knowing what these ports do can help you understand the purpose and relevance of each connection X NetStat has a built in port database that provides quick reference to common Internet ports and what their functions are You can access the Port Info database three d
4. exe Motes F iQocuments and Settings Drew Mozila FireFox F Frogram Files Mozilla Firefox Fir Hybrid DC Giimusic Hybrid Live Ot Buzz Wa Clear all Yiewbar leWBar W Enable viewBar Start docked to of screen Sutohide fw Slide effect i Blend connections in to viewBar ff Show transmisson lights ff Show clack me Show Seconds on clock Show border W Autoscroll connections L Show each connection For f ts SECS Remote Access Options Enable X NetStat Server Turns the server on or off Port to Use The port on your computer that the server will use Port 11131 is default Include Net Stats Include information from the Net Stats window in the HTML report AutoRefresh Includes a META Refresh tag so the page is reloaded every few seconds Authentication required Password protects access to the X NetStat server You must know the password in order to view the report URLs Shows the URLs to access the X NetStat server See Also Remote Access Logging Options Log X NetStat Activity When checked certain activity in X NetStat will be logged to a file Record address and What to include when recording each activity See also Logging X NetStat Professional 5 3 User s Manual Page 18 of 38 Options NetStat Options gt Remote Access General emote 4ccess Connection Table M Enable NetStat Server Port fo use 11131 Include Net Stats in rep
5. Check For changes in Local IP amp Hostname Check for changes in Local IP Hostname When enabled XNS will update the Local IP and Local Hostname on every refresh to i Continuously repaint Connection Table reflect potential changes Memory Leak protection For beta versions only checking this will make X Sow Sone i fin the ViewBar EJ NetStat restart itself every 24 hours Show Port Numbers next to Shortnames Continuously repaint Connection Table When checked the Connection Table will be repainted every second instead of every refresh Uncheck to increase performance Show Connection Events Specifies PEE where you want Events New Connection Closed Connection etc to show up when the program is minimized Show Port Numbers with Shortnames When enabled turning on Shortnames will display both the Port s code name and its number Don t Warn when Terminating Restarting Checking this will disable the confirmation message box when you decide to terminate or restart a process X NetStat Professional 5 3 User s Manual Page 22 of 38 ViewBar Access The ViewBar is a small window that is dockable to the top or bottom of your screen and displays your connections over time This handy feature allows you to keep an eye on your connections but without having the main X NetStat window visible and taking up space It has the same appearance and nature as the Windows taskbar and the Microsoft Office Shortc
6. PM New moscow uwec edu lt 3001 36335 gt Established ala sexe S304 so PM Changes 80 15 40 17 lt 3548 4662 gt Established gt Fin wait1 emule exe 8 02 59 PMI Changes 80 15 148 16 lt 3559 4660 gt BEstablisnhed gt Fin wairi emule exe 8 07 02 PM New localhost lt 38013 38914 gt Bstablisned mozilla exe 8 07 02 PM New localhost lt 3814 3813 gt Established mozilla exe 8 07 02 PM New 2051680 12o 127 lt 3032 5190 gt Established aim exe 8 07 02 PM New 2 2050168 0 145 lt 3040 5190 gt Established aim exe 8 07 02 PM New 2 host207105075031 borlanc com lt 3262 80 gt Close wait delphi32 exe 8 07 02 PM New 207 105 63251 lt 32 63 80 gt Close wait delphi32 exe 8 07 08 PM New A ZES OO ile el lt 38 4B AA 3 gt Established mozilla exe 8 07 21 PM Closed i8 cnn net lt 3833 80 gt mozilla exe 182072321 PM Closed 18 cenn nert 13032 80 gt mozilla exe 18307 29 PM Glose 80 8 55 221 lt 3051 4662 gt emule exe eS OG See PM CLloseas AI ay ick eer lt 3850 4661 gt emule exe 18 07351 PMI X Netseae shurcclowmn To view your Logs click the Logs button on the toolbar or click the Logs main menu and then click the date you want to view The log file will be opened in Notepad Click Show all Logs to open the Logs folder in Windows Explorer Alternatively you can click Log Viewer to use X NetStat s internal Log manager TIP Turning on many logging options can slow d
7. Recognize C Lookup Ca Tray _ Remote Port Status X NetStat Professional 5 3 User s Manual Page 31 of 38 Recognize an address TF a connection partially matches either Hostname ultrabank com IP 216 138 240 Wet5tat will recognize it with Friendly name C Recognize on exact match only Recognize partial matches C Stop recognizing this Friendly name Cancel Gea Options f Exit Programs 4 IB et Stats Recognized Protocol Age_ 00 03 06 00 03 06 00 03 06 00 03 05 00 03 05 00 02 25 00 02 15 Established Established Established Established Established Time wait Syn sen Last Refresh 5 2 2004 5 37 22 PM This connection is now recognized as UB Ultrabank 137 28 229 241 moscow lIn 16 I Gut 14 ae lt new connection Other connections that X NetStat doesn t recognize are shown as X NetStat Professional 5 3 User s Manual Page 32 of 38 Net Stats Your Network Statistics The Network Statistics window displays information on your network interface and Statistics for the IP ICMP TCP IP and UDP protocols If more than one interface is detected you can view the them by clicking the dropdown arrow next to the adapter name see Red Box Accessing Network Statistics You can view Network Statistics 4 ways 1 Click the Net Stats button on the toolbar 2 Click Network Statistics on the Tools menu 3 Double click the LEDs in t
8. localhost 3656 3657 Established rrF TEF 00 01 33 localhost 3657 3656 Established Fe TEF 00 01 32 205 158 5 158 z009 5190 Established ADL TEP 00 01 32 205 185 12 125 3516 5190 Established ADL TCP 00 0132 205 188 6 142 3oz n190 Established ADL TEP 0001az localhost a0 3691 Time wait 00 00 52 pi TCP 7 noded ultrabank com ag Syn sent 00 00 42 Last Refresh Sf2 2004 5 37 22 PM 137 268 279 241 moscow In 16 Gut i 1 new connection Ultrabank com is a business partner that frequents our network Let s recognize them Right click the connection and choose Recognize as Recognize as oo TraraD eu iFa For each friendly name you can have X NetStat recognize on either an exact match or a partial match If you choose EXACT match X NetStat will ONLY recognize when either the IP or Hostname exactly matches the friendly name For PARTIAL matches see right X NetStat will recognize a connection even when a portion of the addresses match up For example by using ultrabank com and 216 138 240 X NetStat will recognize all these addresses as UB nodel ultrabank com node2 ultrabank com www ultrabank com 210 138 240 410 VAAN cere eo ee 1 Oe ae ZAG akOO 240 2 OD 4 X NetStat 5 0 File Connection View Rules Refresh Fe Info Tools Help sf Kil Remote Addr Local Port localhost localhost 205 158 5 155 205 185 12 125 205 158 6 142 localhost a noded ultrabank com
9. on a domain name such as who registered it where that person resides and contact information for businesses and people associated with the domain There are two things you must know when doing a WHOIS query The query string and the server you are going to query The query string is usually a domain name such as freshsw com However it can include other types of queries as well and will give different results based on what s on the WHOIS server You can try entering a person s last name the name of a corporation or the direct handle of a contact To see what syntax a server accepts click the Help button after choosing a server The WHOIS server you must use usually depends on the type of domain name you are querying If it ends in a com net or org you will want to use whois verisign grs net as the server If you need to query an IP address use arin net for the United States and ripe net for Europe See Appendix B WHOIS servers Click the Go button to start the query You can also use a specific port in this format server port eg arin net 44 X NetStat Professional 5 3 User s Manual Page 13 of 38 Finger According to RFC742 a finger query returns a friendly human oriented status report on either the system at the moment or a particular person in depth Note that Finger is an old protocol that is not in common usage today However some servers still run finger daemons and you may find the information they
10. return to be useful To make a query use the form of an email address such as user server com Check Verbose to instruct the server to return as much information as possible See Also RFC 742 NS Lookup NS Lookup is a program to query Internet domain name servers for their records on an IP or hostname There are several types of queries that can be made Simple Changes IP to Hostname or Hostname to IP based on records in the DNS Cache Short for mail exchange record an entry in a domain name database that identifies the mail server that is ws responsible for handling e mails for that domain name A Address records This is where the hostname to IP name to number mappings are kept PTR PTR records are the reverse of A records They map an IP address to a hostname rather than vice versa SOA SOA Start Of Authority records indicate the extent of the zone for which the name server is authoritative They also contain information about how frequently they should be checked for updated information Any Returns any available information For more information The In s and Out s of DNS and Appendix C IP Addresses and Hostnames Web Search Provides a gateway to query several popular web search engines Simply type in your search query select which search engine to use and click search Server Version Sends a HTTP HEAD request to a server on port 80 which returns data on the type of web server and operating system the server is r
11. using 2 Click the button to display Port Information on the remote port Next status information is shown The Protocol being used either TCP or UDP the state or status code of the connection an explanation and what process running program is being used to facilitate the connection Finally X NetStat displays how long it has been aware of the connection To close the window hit ESC Advanced API must be turned on Windows XP only X NetStat Professional 5 3 User s Manual Page 6 of 38 Connection Info 4 Recognized Click here to recognize this connection Local Host IP 137 286 2279 241 Local Port Info Hostname moscow uwec edu Port a007 Remote Host IP 64 154 80 254 Remote Port Info Hostname ns vipe hitbox com Status Protocol TCP Process Info Stake Established Process mozilla exe Status Description Connection has been established NS has been aware of this connection since 11 38 31 PM Age 00 00 06 Connection Information is also available in the InfoPanel under the Connection Info tab X NetStat Professional 5 3 User s Manual Page 7 of 38 Process Information Window This dialog box shows you information about the Process AKA application or running program that is behind the connection The program has either initiated the connection to the remote address or has facilitated a connection the remote address has made to your computer
12. It was founded by Drew Niese me in 1998 when was 15 years old as an extension of my programming hobby Since that time FS has released several freeware and shareware programs to the Internet community don t have the resources to run Fresh Software like a conventional full time business because am enrolled as a student at UW Eau Claire studying a blend of Business Computers and Management Information Systems That s why want my software done right the first time X NetStat Professional has gone through an extensive beta testing program to make sure that it is of the highest quality in terms of features ease of use performance and stability That s part of the four driving commitments Fresh Software has to its customers Ensuring FS programs are unique and useful Ensuring FS programs are easy to use and of superior quality Ensuring customers are completely satisfied Ensuring customers are always listened to MONS hope that have met these commitments and that you find X NetStat Professional to be well worth the registration price If you have complaints praise questions suggestions or comments about the program would really like to hear from you and will do my best to respond You can email me at drew freshsw com Fresh Software is on the web at http www freshsw com
13. Log Manager System Requirements e Windows 98 2000 or XP e 64MB Ram e Pentium 233 MHz On average X NetStat will consume less than 1 CPU resources at any given time To begin discovering how X NetStat can empower your network management keep reading or simply start the program and play around with it you should find the program intuitive to use Windows XP Only Main Window Toolbar Quick access to the most important features of X NetStat To add or remove buttons to the toolbar right click on any button and check uncheck the buttons you wish to be visible You may also add or remove buttons by using the View menu Connection Table The core of X NetStat This is where connections are displayed InfoPanel Shows detailed information on the currently selected connection Status Bar Shows progress of a connection refresh time of last refresh address information for computer pings sent received etc You can customize what you want to appear in the status bar Double click the status bar to add or remove panels X NetStat Professional 5 3 Users Manual fs X NetStat 5 2 Page 3 of 38 Joe File Connection Yiew Rules Tools Help Debug F ill t Refresh FT 7 amp ES info CA Lookup C Tray Established Established Time wait ncdmirr pptp 3588 conferenc 3551 http pn2 cns uwec edu bh 228 218 rh uwec edu unknown Level3 net unknown Level3 net Time wait oam d05c b
14. X NetStat Professional 5 3 User s Manual Page 1 of 38 X NetStat Professional Users Manual et Ca iC Last Revised May 2005 Copyright 2005 Fresh Software You ve got connections Please check the X NetStat Professional website at www freshsw com xns pro for updates to the manual and program Contents e What is X NetStat 2 0 cece ccccee cece ee ee eee ee ennnaeceeeeeeeeeeetnnnngeennnrs 2 e MAU NOON aA AA ewe santas 3 RCN ONG isc ncsasdveneicdnacesacksesdadenase poaiisnmmanapdenaesapecnors 4 e Getting More inforMatiOn ccc cece cee ce cece ence eee eeeseeeeeeeeeaseeeteeanees 5 o Connection Information ccccccceceecceeeeeccreeeeeeurceeteeeeenees 6 o Process INformatiONn cccceeeeeeeee cece eeeeeeeceeseueseeneeerseeeneees 7 o Port NMONIAUON oc os vcnecccincctcd ccceissweensuccscucascastevaedentsmebecuceaucds 8 o The et eas 9 LOOKUP TOOIS ccc ee ccc cence ee ee eee eeeeeeeeeeeaeeeeeaaeeneas 12 e Options Configuring and Customizing XNS cccceee cece eee eeeeees 14 e Other ways to access X NetStat o ViewBar ACCESS ccccccccccceceeeeeeeceeeeeeeeeeenauuuerteneueneeeeennns 22 Oe ashes eee seedy obec yc nseee ween neces T 23 o Remote MOCO SS oc cciiscvstcnecawsetaessnsdadesweet dors evmneieiwniecnesntbetes 24 Ns cae se se zc ec E ee pes aan Reena 26 e Rules Responding to Network Events ccccccsceeeeeee cease eeeeneees 27 e Recognizing your connect
15. activity is logged in this window A GET Stop Server Show Report message means someone has tried to connect to the server A subsequent gt gt Sent message means the user was authorized and the report Webserver started 2 19 2005 4 36 03 FM GET from 192 168 1 103 2 19 2005 4 36 08 FM me bent 3 732 bytes was seni GET from 192 166 1 103 2 19 2005 4 56 09 PH ee Sent 3 734 bytes To close the window hit ESC or close with the X button If you want to stop the server click Stop Server To show the current report click Show Report Server is running requests Served 7 464 bytes Someone who successfully accesses the server will see a report like this Mozilla Firefox Jog File Edit Wiew Go Bookmarks Tools Help NetStat 5 2 Server moscow2 137 28 70 37 Local Time 2 19 2005 4 39 07 PH a HNetstat Uptime 24 sec aystem Uptime 1 days 21 hrs 1 min 23 sec Remote Addr LocalPort Remote Port Status Recognized Age Process oam dOSc blue aolcom sharp server aol Established AOL 22 sec_ aimexe wawmsncom eee fal Established AOL 22sec aimee 209 170 79 215 trict 10 localhost apcpens dsomeserver Established fe 22sec_ firefox exe x Met5tat Professional 5 7 is Copyright 27005 Fresh Software i 6 a S 10 Done X NetStat Professional 5 3 User s Manual Page 26 of 38 Logging You dont have to be sitting in front of y
16. ansmission rate Setting this too low will decrease performance Recommended setting is 100ms to 500ms X NetStat Professional 5 3 User s Manual Page 20 of 38 Options NetStat Options General z Connection Table Friendly Names Rules oo Programs gt View bar Remote Access Logging Advanced J Sasssunnsunnsnnnunsnunnnnn Extra Options Cancel advanced Options gt Advanced SMTP email server smtp Freshsw com SMTP email server username iF required drfresh SMTP email server password iF required patentee Show splash screen Iw We Flash cells in Net Stats window Update Net Skats every S000 s ms Update LED lights every 250 ts ms X NetStat Professional 5 3 User s Manual Page 21 of 38 Extra Options l Extra Options Options Old style toolbar highlight Turns a X NetStat Options gt Extra Options toolbar button s text blue when the mouse is hovered over it much like the HotTracking General Extra Options feature in XNS version 4 0 Connection Table Be cllaivle tevolber e Friendly Mames Flat Column headers Flattens the column piles M Flat column headers in connection table headers in the Connection Table Programs Confirm on exit Viewbar Confirm on Exit Asks you if you are sure E GEcene you want to exit X NetStat when closing Logging Advanced Extra Options Memory Leak Protection
17. at Options gt Connection Table style of the font used for the Connection Table General Connection Table Columns Shows and hides columns in Font 7 Friendly Mames X NetStat s main window ori Tahoma a Lo E i P HotTrack on Connection Table When ratang a TOE E E checked you can select a connection by ViewDar Ja AR i i Remote Access eee hovering your mouse over it a F Rerote Addr e e a oo aging Local Pork Local Addr Show grid lines Separates information in the Advanced mF Ser nati Eat Age Connection Table with lines for easier reading Extra Options w Status w Process Time Show FilterBar Turns the Filter Bar on or off When the Filter Bar is on type into a text field at the top of the connection table to show ONLY iw Show grid lines in connection table connections that match that criteria HotTrack on connection table iw Show FilterBar You can use multiple filters by using a comma Show open UDP ports For example to show com addresses but hide all net addresses use Show open TCP ports LISTENING connections com net Show a port s shortname when available This option can also be toggled from the View Cancel menu or by clicking the funnel icon T onthe toolbar Show open UDP ports Displays UDP listening ports in the Connection Table Show open TCP ports Displays TCP connections with Listening status AKA Open Ports in the Connection Table Show a por
18. based WHOIS gateway check out allwhois com Type of query com org netDomainname Government gov Military mil IP address USA IP address Europe IP address Asia Pacific IP address Latin America Other country uk de etc kt Server to use whois networksolutions com nic gov whois nic mil arin net ripe net apnic net lacnic net nic xxx where xxx is the country code or domain suffix Example query powder com fbi gov usace army mil 172 206 65 182 80 170 35 191 203 99 65 227 200 47 53 10 amiga de Note See the file whoislist dat in the X NetStat directory for a list of international WHOIS servers X NetStat Professional 5 3 User s Manual Page 37 of 38 Appendix C IP Addresses amp Hostnames An IP Internet Protocol address is a numerical sequence that uniquely identify a computer or other networked device on a network such as the Internet To be able to use the Internet your computer needs an IP address so that network traffic can be directed to and from it When you log on to the Internet your Internet Service Provider ISP typically assigns you an IP address for your current session If you use a dial up you usually receive a different address each time you connect If you connect to the Internet from a local area network like you might at work or through a cable modem or DSL line you might have an IP address permanently assigned to your computer Anytime you send an e mail acc
19. d to Antigen send outgoing Email messages Email Password Sender For more Information Kuang What is a trojan whatis com Mail Bomb Trojan Trojan Horse Attacks irchelp org Magic Horse Trojan Moscow Mail Taprias Win ty lt Trojan horse information X NetStat Professional 5 3 User s Manual Page 9 of 38 The InfoPanel New in version 5 2 is the InfoPanel a dashboard that sits below the connection table that integrates Connection Information Process Information Port Information Location Information and System Information into one easy to access place InfoPanel Click a button to display information ses Connection Info M Process Info Port Info be Location Info wj System Info x Recognized A AOL Local Host Remote Host IP 197 168 1 103 IP 205 188 246 163 Hostname moscow eau wi charter com Hostname oam d Sc blue aol com Port 3617 Port 5190 Status Rule Dreakaceal Tr O To make use of the InfoPanel just select a connection and information will appear Click another tab to display other information To get the InfoPanel out of the way click the Down button View Rules Tools Help This will shrink the InfoPanel down to a minimal size and change the Down button to an Up button show Open UDP Ports Show Open TEF Ports Click Up to restore the InfoPanel to its previous height Show Pork Shortnames Show Filter Bar To close the InfoPanel completely click the X in t
20. dow Kill Connection Attempts to forcibly disconnect the connection Extended Kill Kills and sets rule to auto kill address if seen again Recognize as Associates a friendly name with the connection TraceRoute Traces the path from your computer to remote comp WHOIS Various WHOIS functions NBLookup Attempts to retrieve computer s NetBIOS name These commands are also available under the Connection main menu New in version 5 2 is the InfoPanel which provides easy access to View Message Alert if connection has tripped a rule A Yiew Alert Refresh Copy Connection Info b Connection Info Pas Process Info ALi Local Port Info 2768 Remote Port Info 5190 va Kill Connection CF Extended kil i Eo Recognize 45 zs TraceRoute med WHOIS d ie MB lookup Connection Info Process Info Port Info Location Info and System Info in one place Connection Information Window Double clicking a connection in the Connection Table brings up the Connection Info window Here all available information about the connection is shown If the IP or hostname matches an IP address or hostname you have recognized it will display the name at the top Then comes local information Your local IP and hostname and the port being used on your end 1 Click the button to display Port Information on the local port Next is remote information The IP and hostname if available of the remote computer and the port it is
21. ed Local Host Remote Host IP 197 168 1 100 IP 64 256 354 196 Hostname moscow eau wi charter com Hostname uwox dis slot3l skream aol com Port 3030 Port 50 J Status Bandwidth Protocol TCP Stabe Established In 335 371 bytes 17 73 KBis E Process winamp exe Out 16 400 bytes 0 38 KBys Connection has been established si The X NetStat Packet Sniffer can display bandwidth meters to show the portion of total available bandwidth used per connection See Also Packet Sniffer Options X NetStat Professional 5 3 User s Manual Page 34 of 38 Other X NetStat Tools X NetStat has other tools you can access from the Tools menu Google Search You can do a Google Search any time by hitting Ctrl G and typing in your query Get External IP Address If you are behind a NAT or internal network setup your External IP the one the outside world sees may not be obvious Click this will contact Fresh Software s server and report back to you your external IP Banish Hostname This feature adds an entry to your HOSTS file that makes a hostname resolve to 0 0 0 0 preventing any outgoing connections to be made Nuke Connections Attempts to kill EVERY established connection RWHOIS RWHOIS extends and enhances the WHOIS concept in a hierarchical and scalable fashion It focuses on the distribution of network objects the data representing Internet resources or people and uses the inherently hierarchical nature of these network ob
22. ervice Provider or click one of the links to go to an online bandwidth speed test See Also The X NetStat Packet Sniffer X NetStat Professional 5 3 User s Manual Page 19 of 38 Options X NetStat Options gt General Connection Table Friendly Names Rules Programs s Miewbar Remote Access Logging Packet Sniffer Advanced Extra Options Cancel Packet Snifter Packet Sniffer jw Enable NetStat Packet Sniffer Show total traffic in Kilobytes KB ke Display Bandwidth Meters 300 00 4 32 00 44 To better determine your maximum bandwidths OSLreports com Speed Test Bandwidthplace com Bandwidth Speed Test CHET Bandwidth Meter speed test Load Default Values Advanced Options SMTP email server The outgoing email server to use when sending an email triggered by a rule SMTP username If a username is needed to send email on this server specify it here SMTP password If a password must accompany a username specify it here Show splash screen Shows the X NetStat splash screen on startup Flash cells When checked a border flashes around each value in Net Stats that has changed Update NetStats How often to refresh Network Statistics in the Net Stats window Update LED lights How often to check bytes in bytes out to see if a LED should be flashed on or off Also how often to check the tr
23. ess a Web page or try to send or gather other information to or from the Internet your Internet application communicates with a server via its IP address IP addresses are usually formatted by means of four numbers from 0 to 255 separated by dots A typical IP address might be 209 94 162 45 Since it is difficult to remember arbitrary strings of numbers and an IP address for a given computer can frequently change textual hostnames are used in place of numeric addresses Hostnames are used to make addresses easier to remember and to continue to identify a specific computer even when its IP address changes DNS Domain Name System is the Internet function that provides hostname resolution which translates textual hostnames into numeric IP addresses The Domain Name System is what enables you to type in names such as www freshsw com instead of numerical IP addresses When DNS translates hostnames into their numerical counterpart the process is usually transparent to the end user When an Internet application encounters a textual hostname it sends a request to a DNS server The DNS server will then respond with the IP address associated with the textual hostname or it will signal an error if it cannot find an associated address For more information The In s and Out s of DNS X NetStat Professional 5 3 User s Manual Page 38 of 38 Appendix D About Fresh Software and its commitment Fresh Software is not a giant corporation
24. etStat server You must know the password in order to view the report URLs Shows the URLs to access the X NetStat server Note that the top URL shows the NetBIOS name and will only be accessible from Microsoft based networks Options NetStat Options gt Remote Access General Remote access Connection Table W Enable NetStat Server Friendly Names Rules Pork fo use 11131 Programs oo Wie wbar Include Wet Stats in report Remote Access Logging W AutoRefresh report Advanced n every lio kA seconds Extra Options W Authentication required meu NS Password 12345 The URLs to check this computer will be btto imnoscome11131 Akko ffi 37 28 229 241 11131 Cancel When running the X NetStat server will stay in the background You can see the server status on the status bar SNS Server GET from 137 286 229 241 137 28 229 241 moscow In 5 I Gut 4 a 10 new connections When someone makes a request to the XNS Server it will appear in the leftmost panel of the status bar The main status text The status of the server can also be seen by looking at the server icon Server is OFF i BES Server is ON Server is BUSY When the server is OFF double click the server icon to start it When the server is ON double click the server to see the Server status window X NetStat Professional 5 3 User s Manual Page 25 of 38 XNS Server Status Window El XNS Webserver Joa Server
25. he status bar i Network Statistics Interface Stats IP Stats Network Interface ICMP Stats TCPYIP Stats UDP Stats NVIDIA nForce MCP Networking Adapter Bytes Received 176 978 532 Last update 3 21 2004 3 16 27 PM Bytes Sent 719 629 175 NVIDIA nForce MCP Networking Adapter 178 692 414 1 131 315 2 186 0 T 719 573 117 1 473 404 964 100 000 000 Up Oineratinnal X NetStat Professional 5 3 User s Manual Page 33 of 38 The X NetStat Packet Sniffer X NetStat Professional comes with a built in packet sniffer that can double the program s power in one click When the Sniffer is activated X NetStat will monitor the data coming in and out of your network adapter so it can calculate the bytes coming in and out per connection It will even tell you how fast the data is flowing Bytes In Y Bytes In Rate Bytes Out Bytes Gut Rate Te Taree Te Click to activate the X NetStat Sniffer 435 0 00 KB s 373 0 00 KES 40 0 00 KB s 46 0 00 KBys j 0 00 KB s 0 0 00 KBs T noon kK Rts nnn kK Rte X NetStat will calculate the data flow for every connection This feature is perfect for telling which connections are actively pumping data and which ones are just sitting idle The X NetStat Packet Sniffer may increase your total CPU usage so if you are running on a slower system it is recommended to only turn it on as needed Recognized Rule A Futurized Aadio Mo rules trigger
26. he upper right hand corner To turn it back on click the View menu and choose Show InfoPan w Show Toolbar Toolbar Buttons d Show Columns d Show Viewbar Show InfoPan Everything in the InfoPanel can be activated through the Context Menu except for Location Info and System Info which are explained below X NetStat Professional 5 3 User s Manual Page 10 of 38 InfoPanel Location Info The Location Info section of the InfoPan allows you to do a one click WHOIS lookup of a connection s IP address domain name or both To use simply select a connection click the Location Info tab and click IP Lookup or Domain Lookup h Connection Info E Process Info a Gi Port Info k Location Info System Infa F Bown x p P gam doSc blue aol com Domain Lookup 205 188 248 163 pug America Unline Inc AMERIC 59 22080 Pacific Blyd sterling atateProv Vi PostalCode 20166 US Alo Lea 2c lGee era s2a5 2U5 1lee 0 0 16 AQL DTC IP Lookup When clicked X NetStat will query the IP address of the connection in the databases of ARIN American Registry for Internet Numbers RIPE R seaux IP Europ ens APNIC Asia Pacific Network Information Centre G LACNIC Latin American and Caribbean Internet Addresses Registry The organization that owns the IP address will then be displayed see above In rare instances several duplicate records will be al found and you will need to focus your quer
27. ifferent ways 1 Click the button in the Connection Information window 2 Click Port Info from the Tools menu 3 Right click a connection and select Port Info 4 Click Port Info tab on the InfoPanel Port Information window Port Info The majority of the window is taken up by a field that describes the port s code word the name of the port anda description if it s available sl To look up a port just type it in smtp Simple Mail Transter Protocol If the port you have looked up is associated with any trojan A a eN ee horse programs the Trojan horse information gt gt button Simple mail transzfer protocol uzed to will light up send outgoing Email messages Upon clicking it the window will expand and display a list of associated trojans with a link to detailed information on each See below mA Trojan horse information gt gt If a trojan horse has been known to use Port Info the port you just looked up clicking the Trojan horse information gt gt button will Port Info 25 expand the Port Information window with the list of trojans Enter pork Trojan Horse Information Clicking on any trojan horse name in the p These trojans are associated with port 25 list will take you to a website with detailed ice Malcuahsker Protocol Click a trojan to get information information and removal instructions on eres each trojan Simple mail transter protocol use
28. ii Lookup Tools ZB ae Tee Gur Query cisco com Server whois verisign grs net 0 Help g hols gt Resolving hostname whois verilsign gra net gt gt Connecting to 198 41 3 54 gt Connected m Whois Server Yersion 1 3 eat NS lookup Domain nanes in the com and net domains can now be registered WebSearch With many different competing registrars Go to http w internic net for detailed information gt Server Version Domain Name CISCO COM Registrar NETWORK SOLUTIONS INC Whois Server whols networksolutions com Referral URL http rmm networksolutions com Name Server NWSl CISCU COM rm Online Tools Name Server N52 CISCO COM status ACTIVE Updated Date le jun 2zoue 2 MB Lookup Disconnected TraceRoute A graphical interface for the TraceRoute or tracert program This applet uses the ICMP protocol to map what servers hops are being used to route a packet of data from your computer to a remote destination system To trace a server just enter the IP address or hostname and click Trace During this process information regarding the status of the TraceRoute will be shown in the status bar As each hop is reached information about the hop will be shown in the table Note Your firewall may restrict ICMP packets which may result in TraceRoute not working properly WHOIS WHOIS connects to one of several online databases of domain names domain com domain net etc You can obtain information
29. ions with Friendly Names 0eeee 30 e Net Stats Your Network StatisSticS ccc ccc ecceeeeee esse eee eeeeeenenaenees 32 e Add more power The X NetStat Packet Sniffer cccee cece ence es 33 e Other X NetStat Tools cccccecc cece eeeeeeceeeeeeeeeeeeeeeeeeeee ener EPET 34 e Appendices o Appendix A Netstat Status COd S ccccecece ee eeeeeeeeeeneees 35 o Appendix B WHOIS Servels c cece cece eect ee seee teat eee teesees 36 o Appendix C IP Addresses amp HOStnaMmes ccccee cess eet o Appendix D About Fresh Software and its commitment 38 See also readme txt whatsnew txt X NetStat Professional 5 3 User s Manual Page 2 of 38 What is X NetStat X NetStat is a program that displays information on your current Internet and network connections much like the console netstat exe program but in a graphical interface These connections are established each time you visit a web page send an instant message check your email or anytime you do network activity that requires you to connect to another computer They also appear when outside computers attempt to connect to your machine authorized or not Each connection is displayed in the Connection Table where you can see the address you are connected to what ports local and remote are being used the connection status the program EXE used to open the connection and how long the connection ha
30. jects domain names Internet Protocol IP networks email addresses to more accurately discover the requested information See Also About RWHOIS Find Files Opens the Windows Find Files dialog Find Computer Opens the Windows Find Computer dialog Run Opens the Windows Run dialog Shut Down Opens the Windows Shut Down Restart Log Off Standby dialog X NetStat Professional 5 3 User s Manual Page 35 of 38 Appendix A Netstat status codes CLOSED LISTEN SYN SENT SYN_ RECEIVED ESTABLISHED CLOSE _WAIT FIN _WAIT_1 CLOSING LAST ACK FIN WAIT 2 TIME_WAIT TCB_DISCARD The connection is disconnected and not being used Your computer is waiting for an incoming connection This is an open port Actively trying to establish connection Initial synchronization of the connection under way about to connect Connection has been established connection is active Remote shut down waiting for the socket to close Socket closed shutting down connection Closed then remote shutdown awaiting acknowledgement Attempting to shut down connection Remote shut down then closed awaiting acknowledgement Socket closed waiting for shutdown from other computer Wait after close for remote shutdown retransmission TCP connection control block discarded X NetStat Professional 5 3 User s Manual Page 36 of 38 Appendix B WHOIS Servers Note Click on the globe icon to visit the web gateway for each WHOIS server For a really handy Web
31. lue aol com 64 12 25 76 localhost localhost Established Established Established rsisysa directv directv directy web directy soft o o ii Connection Info 7 Process Info Port Info Recognized Ey AOL Local Host Remote Host IP 137 28 70 47 IP 205 185 248 163 Hostname moscow Hostname oarm d05c blue aol com Port 2768 Port 5190 Status Protocol TCP State Established ast Refresh 1 27 2005 12 07 01 PM Eh Options AOL AOL AOL AOL Programs amp Net Stats System aim exe System Process System Process aim exe aim exe mozilla exe mozilla exe 137 28 70 47 moscow2 10 total connections X NetStat Professional 5 3 User s Manual Page 4 of 38 Interpreting Connections Connections are listed in the Connection Table Here s what a connection might look like Remote Addr Local Fort Remote Port Status Age Time Recognized Protocol Local Addr Process 75 WWI con com 47 18 50 Established 00 00 01 4 02 57 PM TCP moscow dsl verizon nek mozilla exe A set of headings is at the top of the Connection Table Use the table below for an explanation of these headings The connection number The computer server the connection is involved with This can be displayed as either an IP address or hostname depending on your DNS Seitings and whether Remote Addr a hostname for the IP address exists See Appendix C IP Addresses and Hostnames Local Port The p
32. ne ed To turn a on or off check or uncheck the Rules O i anyone box next to the rule in the On column Programs a Wiewbar To edit an existing rule select a rule and Remote Access click Edit Lagging Advanced To add a new rule click the Add button Extra Options Both Edit and Add buttons brings up the Add Edit Rule dialog box Addr ads web aol Lport anw Aport 80 Reg 0 connections Present For 0 seconds l Kill Conn ar Add Sa Edit Delete Clear all Ok Cancel Edit Rule Conditions The Edit Rule dialog box has two parts Conditions and actions These are the conditions which must be met by a connection for X NetStat to trigger the rule They include Address Number of connections Local Remote Port Process EXE How long the connection has been present Once you have set the conditions for the rule click the Actions tab at the top of the screen to tell X NetStat what you want to have happen when those conditions are met X NetStat Professional 5 3 User s Manual Page 28 of 38 Edit Rule Eq Edit Rule 2 Conditions Actions Trigger conditions Please choose conditions under which to trigger rule Actions C Any remote address f IP or Hostname must contain L fads P Minimum connections required fi t Local Port must be MW Remote Pork must be feo Process EXE contains Connection present For atleast 120 second
33. ntil you restart the Connection 1 ypn cns uwec edu progran Rule 3 l If you want to turn off the rule completely check Disable this rule Actions Taken completely F D projiensSp loginscript bat B E AA P SgEENRE ba At the bottom of the window are three buttons OK Close the window Edit Rule Opens the Edit Rule Dialog box Actions Provides a menu of additional actions to perform Disable this rule completely Click the Left Right arrows to scroll through your current Alerts Edit Rule Actions X NetStat Professional 5 3 User s Manual Page 30 of 38 Recognizing your Connections with Friendly Names What s a Friendly Name If you re running a busy network there may be a whole lot of connections displayed in X NetStat making it hard to ascertain what each one is for It s your job to make sure that good connections are getting through and bad ones arent You can simplify this job by using Friendly Names Say that ultrabank com 216 138 240 196 is a business partner of your firm and connects to your network occasionally for transaction processing This would be a great address to recognize so that it is marked as a friendly human readable name when it shows up in X NetStat i X NetStat 5 0 File Connection View Rules Tools Help Refresh Info a Kill ag Lookup Ca Tray Ez Options f Exit Programs 4 Met Stats Remote Addr Local Fort Remote Port Status Recognized Protocol Age
34. on LEDs Transmission LEDs will light up in response to network activity System clock Shows your current time Double click to copy it to the clipboard Tray Access X NetStat Professional 5 3 User s Manual Page 23 of 38 X NetStat minimizes to the system tray for easy access il C Lookup Refresh I Info Click the Tray button to send X NetStat to the system tray You can also simple minimize X NetStat Necskat Professional 5 0 Fa 10 04 PM gts pe Thursday E 4 29 2004 X NetStat s Tray icon 16 new connections Restore 10 06 PM Refresh Thursday Gea Options Hover your mouse over the icon Help to display X NetStat s status AI Tools me Viewbar Exit i 10 07 PM J ke Ce Thursday i trayz Paint py 412912004 Right Click the tray icon to display the system menu Double Click the icon to restore X NetStat Remote Access X NetStat Professional 5 3 User s Manual Page 24 of 38 X NetStat features a built in web server that lets you view your connections from any web browser Remote Access Options Enable X NetStat Server Turns the server on or off Port to Use The port on your computer that the server will use Include Net Stats Include information from the Net Stats window in the HTML report AutoRefresh Includes a META Refresh tag so the page is reloaded every few seconds Authentication required Password protects access to the X N
35. ort Programs Viewbar Remote Access Logging Advanced oo Extra Options W dutoRefresh report C penak every fio A seconds i Authentication required Username jens Password 12345 The URLs to check this computer will be https iirnoscows 11131 http t137 28 229 241 11131 Cancel Options NetStat Options gt Logging General ogging Connection Table I Log NetStat Activity if New connections l Programs Viewbar Remote Access Advanced oo Extra Options State changes i Closing connections Rule is triggered SNS remote access W Connection kills Record Remote Address and fh Timestamp Local Rernote Ports Process Cancel Packet Sniffer Options Enable X NetStat Packet Sniffer Turns on packet sniffing when checked so XNS can calculate bandwidth usage for each connection Corresponds to the iB button Show total traffic in KiloBytes When checked displays total traffic in KB instead of bytes Display Bandwidth Meters For each connection shows meteres that measure the portion of total bandwidth used Enter in the maximum KB s KiloBytes per second for your upstream and downstream connection You can choose from a preset of common connection types but this may not accurately represent the bandwidth capabilities of your connection To accurately figure out your connection speeds contact your network administrator or Internet S
36. ort your computer is using for the connection Remote Port The port the remote computer is using for the connection One word status code describing the state of the connection Status codes are Fatu explained in Appendix A Age How long XNS has known about the connection hh mm ss Time The time XNS first noticed this connection Recognized The friendly name if any for the connection A friendly name is specified by you to help you remember who or what a certain IP hostname address is Protocol The protocol being used for the connection Either TCP or UDP Local Addr The local address used for this connection Your IP or hostname Process The program application that is facilitating the connection Only available on Windows XP systems X NetStat Professional 5 3 User s Manual Page 5 of 38 Getting more information The Connection Table shows all available information about the connection but you may find yourself in a situation where you need to know more X NetStat has several built in features to help you further research a connection The Context Menu If you right click on a connection the context menu appears This popup menu lets you perform several actions on a connection View Alert Refresh Refresh Connection List Copy Connection Info Copy information to clipboard Connection Info Opens Connection Info window Process Info Opens Process Info window Local Remote Port Opens Port Information win
37. our computer to catch every connection features you can record X NetStat activity to a text file and review it later If you turn on X NetStat s logging X NetStat can log these events New Connections Changes in connection state status Closing connections Rule activity Use of the X NetStat server Remote Access Connection Kills When logging you can choose whether to include a timestamp for the event the ports involved and the process involved Here is what a X NetStat log file might look like with all these options on Time I Log message Ports Status Process X NetStat log file created 4 30 2004 8 02 29 PM 3202229 PM Startec Recording 8 02 33 PM New 205 188 12 127 lt 3032 5190 gt Established aim exe 8 02 33 PM New 205 1688 6143 lt 3040 5190 gt Established aim exe 8 02 33 PM New a ROTTE n A OA lt 3149 4661 gt Established emule exe 8 02 33 PM New 2 host207105075031 borland com lt 3262 80 gt Close wait delphi32 exe 8 02 33 PM New 207 L05 0833 51 lt 3263 80 gt Close wait delphi32 exe 83 02 33 PM New aba23 neoplus adsl tpnet pl lt 3436 4662 gt Time wait System Process 8 02 33 PM New Ua Nene ona Atte L4G lt 3437 80 gt Time wait System Process 8 02 33 PM New 2 poolsdl ss ineerousaness Iit lt 3439 4662 gt Closing emule exe 8 02 34 PM New s PD9E49117 0ip t dialin net lt 3441 4662 gt Time wait System Process 8 02 59
38. own X NetStat s performance especially if there is a significant amount of network activity T Help Feb 19 05 Feb 18 05 Feb 17 05 Feb 16 05 Feb 12 05 w Enable Logging Show all Logs Log Viewer X NetStat Professional 5 3 User s Manual Page 27 of 38 Rules Responding to Network Events One of X NetStat s most outstanding features is the ability to respond to certain network activity With the Rules system you can configure the program to act upon certain incoming amp outgoing connections Once a rule is triggered X NetStat can do the following things Kill the connection Notify users via email Play a WAV file Launch a script or program Start the Lookup Tools Display a message window TADS Criteria used to trigger a rule The IP addresses or hostname The local amp remote ports being used How many connections from the remote address How long the connection has been present The Process EXE facilitating the connection Sea All rules in X NetStat are shown in the Options window under the Rules section You can jump to this by clicking on the Rules menu and choosing Edit Rules Rules Editor Options The rules are displayed in a table like the NetStat Options gt Rules one on the right Click a rule to read a A ne Rules summary which is displayed at the lower General es panel Connection Table On Address affected Friendly Names ra o Sce
39. s X NetStat Professional 5 3 User s Manual Page 29 of 38 Edit Rule Actions Edit Rule When your conditions are met X NetStat can Edit Rule 2 E perform several actions i Conditions Actions Actions to perform when conditions met Execute a program or file Play a WAV file in the background Open a web page URL Please choose Actions to perform when conditions met Kill the connection Start Lookup Tools Pop up Message Alert Send email Run Program iw Play WAY File q samples camera click way P OpenURL frttp To send email to multiple addresses separate the addresses with a semicolon Attempt to kill the connection Pop up Message Alerts will not be displayed Start Tracing when X NetStat is minimized Instead the system tray icon will blink W Poo up Alert window with Message Blast Hackers probing the network W Send Email notification to Se Message Alert window Message Alert 1 of 1 ke XNetStat Alert pays This window is displayed when either you specify an alert to pop up or by right clicking a connection and choosing View Alert YPN connection now active The window shows the Alert message what connection met what 2119 2005 5 12 51 PM rule and the actions automatically taken by X NetStat eae a If you want to stop seeing Alert windows pop up check Ignore rule Connection has met rule criteria this session The rule will no longer be active u
40. s been active The Professional edition of X NetStat offers a smorgasbord of additional features that are geared towards Network Administrators for their tasks of monitoring and managing networks X NetStat Professional contains powerful features like a Rules system that lets you set up actions based on network conditions a comprehensive Network Statistics window displaying information on network interfaces and protocols a Web Server that lets you access XNS information remotely a collection of Lookup Tools TraceRoute WHOIS Finger DNS Web Search etc and many more features Feature List Display TCP connections amp UDP listens Connection info Process Port Status Addresses Location Info Automatic WHOIS System Info FilterBar search for connections Ability to kill disconnect connections Nuke Connections mass kill DNS Cache for fast hostname resolution Logging XNS activity to file Feature centric toolbar ViewBar amp System tray access Remote Access thru X NetStat Server Comprehensive Port Information Database Banish Hostname Condition Action Rules system Print Save Connection Table Process Information Customize Columns amp Toolbar buttons Customize Status Bar Customize external Programs Customize Font amp Appearance Lookup Tools WHOIS TraceRoute etc Net Stats Interface TCP IP ICMP UDP Check for Updates Assign addresses friendly names DOS Commands menu Get External IP Address
41. t s shortname when available Displays a code word from the Port Database for local and remote ports instead of numbers If the port is not in the Port Database only the port number will be shown To display BOTH shortname and numbers also check Show Port Numbers with Shortnames in the Extra Options section Friendly Names Editor Here is where you can edit all of your recognized friendly names See Also Friendly Names Rules Editor This page displays all your rules and allows you add edit and delete them You can enable or disable a rule by checking the box in the On column See also Rules X NetStat Professional 5 3 User s Manual Page 16 of 38 Options NetStat Options gt Friendly Names General Connection Table Friendly Marne oem Ooo 1 AOL 2 UB Logging Advanced Extra Options IF 05 186 6 142 Hostname 205 168 6 142 Recognize as AIM on exact match only Edit ai Delete Clear all Cancel Options NetStat Options gt Rules General Connection Table Address affected ads web aol anyone 1 Programs mj z fads View bar Remote Access Logging Advanced Extra Options Addr ads Lport anw Aport 80 Reg 0 connections Present For 0 seconds Kill Conn Edit t Delete Clear all Programs Editor This page lists all the external programs to be shown under the Programs button on the toolbar Programs Ld tet Stats e Command Prompt
42. unning on Ex Apache 1 3 29 Unix mod_webapp 1 2 0 dev PHP 4 3 4 FrontPage 5 0 2 2634 Rewrit l la NB Lookup Given an IP address NB Lookup will try to establish a NetBIOS connection and if successful will return the name table of the remote computer Online Tools Contains a list of links to popular web based network tools This list is customizable so you can add your own favorite links Just click the Edit Online Tools button and enter a link in the form of NAME URL e g Fresh Software http www freshsw com X NetStat Professional 5 3 User s Manual Page 14 of 38 Options Configuring and Customizing X NetStat Refresh fff Info ra Kill a Lookup Cal Tray Ea Options F Exit Programs Th Met Stats e Logs Click the Options button to change X NetStat program settings General Connection Table FriendlyNames Rules Programs Viewbar Remote Access Logging Packet Sniffer Advanced Extra Options General Options Options Auto refresh connections When checked X X NetStat Options gt General NetStat will refresh the Connection Table for you automatically so you don t have to push the General Refresh button each time Connection Table iw Automatically rerresh connections Friendly Mames ne Count down seconds in status bar When Bilge Every ko Ei TE checked X NetStat will count down the last 5 Programs seconds until a refresh iw Count down seconds in status bar Viewbar Remote Access Auto lookup hostnames
43. ut Bar Other windows will adjust around it so it will always be visible Turning on the ViewBar The ViewBar is disabled by default To turn it on click the View menu and check Show ViewBar After this a small bar will appear on the bottom of your screen and the surrounding windows should adjust around it The ViewBar E zns 2 bapm cs209 megrhotmalcom 4907 maap Established Microso 13min 10sec menmegese qP Jb Refresh 4 24 PM 2 3 4 5 XNS Button If you click this button it will bring up a menu to toggle the options related to the ViewBar You can also close the ViewBar and exit XNS from here Connection display Here is where the connections are displayed one at a time If Scroll connections is enabled new connections will automatically be displayed after a certain interval If the Scroll connections feature is not enabled you must manually advance to the next connection see 3 By right clicking on a displayed connection you can copy it s information to the clipboard Connection Events like New and Closed connection messages will also flash here Next Previous Pause Refresh buttons By clicking the up and down arrows you can manually browse through your current connection list Clicking the Pause button will stop Auto Scrolling connections Clicking the Refresh button forces a refresh of active connections and should be done every so often if you do not have AutoRefresh enabled Transmissi
44. y by clicking the POTE EME button Domain Lookup When clicked X NetStat will determine the domain name of the selected connection and query Verisign s central database to find which registrar handles its registration and then will pull up the WHOIS record This button will only be enabled if the connection s IP address was resolved into a hostname See Also Appendix B WHOIS Servers X NetStat Professional 5 3 User s Manual Page 11 of 38 InfoPanel System Info The System Info section of the InfoPanel does not display connection specific information Rather it shows useful stats such as X NetStat version System Uptime Windows Username Workgroup MAC Address and more h Connection Info Process Info Pork Info bac Location Info System Info x M Netstat Professional Version Built on NS Uptime System Uptime Network Adapter MAC Address Local IP Local Hostname Computer Name Established connections TCP Active Opens TOP Cumulative of connections names UDP Number of Addresses S 2 Beta 24 January 25th 1 min 55 sec 2 days 1 hrs 29 min 53 sec eS Drew Nese UWE N YIDIA nForce MCP Networking Controller 0 5 5 45 00 00 00 1357 26 70 4 moscow moscow a 9 436 cig ee X NetStat Professional 5 3 User s Manual Page 12 of 38 Lookup Tools X NetStat has an integrated interface for several network tools the Lookup Tools window
Download Pdf Manuals
Related Search