Flash Tip: August 31, 2005

Flash Tip: Log Packets with Port Reporter
By William R. Stanek

Q: How can I log TCP/IP port usage data?

A: You can download a tool from Microsoft called Port Reporter (PortRptr.exe). The tool runs as a system service on computers that are running Windows Server 2003, Windows XP, and Windows 2000. Port Reporter logs both the packets that are sent and received and the processes that sent or received them. Conveniently, Port Reporter also has a companion parsing utility that you can download to help analyze the log files generated by the tool.

For detailed information about the features and functionality of Port Reporter, see Knowledge Base article 837243, “Availability and description of the Port Reporter tool.”

To download Port Reporter, visit the Microsoft Download Center.

William R. Stanek is coauthor of the Microsoft Windows Group Policy Guide and several other books from Microsoft Press. The Group Policy Guide is part of the Microsoft Windows Server 2003 Resource Kit.