Reply to thread

Re: Unknown download activity in background - how to determine what it is?


dc wrote:


>Andy,

>

>What does the -b parameter do?


Here is the help description from netstat:


-b   Displays the executable involved in creating each connection or

     listening port. In some cases well-known executables host

     multiple independent components, and in these cases the

     sequence of components involved in creating the connection

     or listening port is displayed. In this case the executable

     name is in [] at the bottom, on top is the component it called,

     and so forth until TCP/IP was reached. Note that this option

     can be time-consuming and will fail unless you have sufficient


You can use an alternative method through the use of the -o switch.


 -o  Displays the owning process ID associated with each connection.


In order to determine the process name you can run task manger

(ctrl-alt-del), select view/select columns and add Process Identifier.

This will allow you to match the process ID output from the netstat

command with a process name.


>I couldn't find it, and when I included it, I got the help legend.


Older versions of the netstat command did not include the -b switch.


>After looking at the legend, I did this...

>c:\netstat -na > netstat.txt

>Did you mean to use another pararmeter

>and if so, what is the command


See the -o info above.


>What is this for? c:\more netstat.txt


It is the "more" command used to read the file "netstat.txt" created

when you used the ">" pipe command.  Using more allows you to see the

entire file one page at a time.  You could also use a text reader like

notepad or to stay in the DOS window try "edit netstat.txt".


Back
Top