ProcNetMonitor is the free tool to monitor the network activity of all running process in the system. It displays all open network ports (TCP/UDP) and active network connections for each process. It has advanced color based auto analysis system to make it easy to distinguish network oriented processes from others with just one glance at the list. Newer version also presents unique ‘Port Finder’ feature which makes it easy to search for particular port in all running process with just one click. It also comes with export feature to save the entire process-port list to standard HTML file for offline analysis.
Features of ProcNetMonitor:
- Informative running process list with TCP/UDP/connection count displayed per process.
- Unique ‘Port Finder’ feature to search for network port in all running processes.
- Advanced color based auto analysis system makes it easy to separate out network based process from others with just one glance.
- AutoRefresh feature to automatically update the process network parameters on selection.
- Faster remote host name resolution using multi thread based approach.
- Display open network ports (TCP/UDP) and active network connections for selected process.
- Sort the process list based on various parameters such as process name, process id, TCP count, UDP count, connection count etc.
- Shows detailed properties of process on double click.
- Option to terminate the selected process.
- Export feature to save the entire displayed list to standard HTML file for offline analysis.
- Refresh option to manually refresh the process and network port/connections list.
Usage of ProcNetMonitor:
ProcNetMonitor will display running process-port list with network based processes highlighted in red color as shown in the Screenshot 1 below.
You can click on any process to view its open TCP/UDP ports & active network connections.
Next you can switch to ‘Port Finder’ operation by clicking on radio button at the top. Here you can type any port number such as 80 and click on ‘Search’ button.
Now it will automatically list all processes which either have the specified port open or remote connections to that port.
You can view more details about each process by simply double clicking on the process.
Use the ‘Refresh’ button to manually reload the process-port list.
Finally you can save the displayed process-list to standard HTML file for later analysis.
Very useful for basic malware , rootkits and system analysis and good part is you can take evidence in html format. for later or advance analysis. For students both system and security can use this tool to study suspecious system behaviour.Installation is simple and easy to use with nice GUI.
Operating system supported:
From XP to Windows 7 all are supported.
Download ProcNetMonitor v2.1 here
Comments on this entry are closed.