SANS SEC504: Hacker Tools, Techniques and Incident Handling — Question 29

You work as a Network Administrator for InformSec Inc. You find that the TCP port number 23476 is open on your server. You suspect that there may be a Trojan named Donald Dick installed on your server. Now you want to verify whether Donald Dick is installed on it or not. For this, you want to know the process running on port 23476, as well as the process id, process name, and the path of the process on your server. Which of the following applications will you most likely use to accomplish the task?

Answer options

Correct answer: D

Explanation

Fport is the correct choice as it specifically identifies processes associated with open ports, providing details like process ID, name, and path. Netstat, while useful for checking open ports, does not provide detailed process information. Tripwire and SubSeven are not designed for this purpose and do not offer the required functionality.