What is tcpview and netstat used for9/7/2023 On Windows Server 2008, Vista, and XP, TCPView also reports the name of the process that owns the endpoint. The contact port is sometimes called the "well-known port".TCPView is a Windows program that will show you detailed listings of all TCP and UDP endpoints on your system, including the local and remote addresses and state of TCP connections. This list specifies the port used by the server process as its contact port, where the first call is made. For the purpose of providing services to unknown callers, a service contact port is defined (the ones you know, port 80, 21 e.t.c.). Ports are used in the TCP to name the ends of logical connections which carry long term conversations. The Dynamic and/or Private Ports are those from 49152 through 65535 The Registered Ports are those from 1024 through 49151 The Well Known Ports are those from 0 through 1023. The port numbers are divided into three ranges: the Well Known Ports, the Registered Ports, and the Dynamic and/or Private Ports. UDP however is like a bull in a china shop and goes blundering *generally* to which ever port it has been told to by an Application. TCP does this exchange *primarily*, it is the RPC (Remote Procedure Call) on the recieving machine that sends a reply back and watching it in TCPview is fasinating. The initial call by a machine is made via the well known port numbers (80, 21, e.t.c.) into a recieving machine which then in turn instucts the contacting machine to move upto a higher range of ports for continued communication. It dynamically displays port activity as it happens. Sysinternals do an excellant little program called TCPview
0 Comments
Leave a Reply.AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |