Today, almost all computers are connected to the Internet when used. Software that is connected to the Internet is everywhere, and where there is a network, there may be threats. Is our network being used by some nefarious program? With the help of a PortExpert software, specific information about all applications connected to the Internet can be provided so that potential threats to the system can be identified and determined.
1. Monitor the network addresses and ports of processes
After launching PortExpert, the software automatically displays in real time the remote addresses and ports involved in all processes currently running programs (Figure 1). The list of addresses allows us to clearly see which software is using the network. From there, we exclude software processes that are using the network normally, leaving processes of unknown origin for us to further investigate.
The default list above does not include system processes that use the network. If you need to show system processes together, click the Show System Procsses button. If you need to show local connections, click the Show Local Connection button (Figure 2).
The TCP protocol is connection-oriented and requires a connection to be established before sending data, while the UDP protocol does not require a connection to be established before data can be sent. the QQ software uses both protocols.
2. Direct Access to Program Process Servers and Websites
If a networked process has a valid remote server or website, we can use the PortExpert software to go directly to the remote server or website to which the process belongs.
For example, when you click the process of “Youdao Cloud Notes”, the Whois button and Web button will light up, which means that this process involves remote server and Web page service. At this time, click the Whois button to open the remote server; and click the Web button to open the Youdao Cloud Notes web page directly (Figure 3).
If you want to know the location of the program file corresponding to a process, simply click on the process and then click on the Folder button in the PortExpert window to automatically open the corresponding program’s folder. If you are not clear about the origin of a process, you can click the Search button after selecting the process to directly search the Internet for the contents of the process, saving you the trouble of opening a web page and then typing in the search.
Tip: Press the Ctrl+L key combination to open the log file of PortExpert software, you can view the upgrade status of the software, the version status, the location of the main program, as well as the current operating system version and bit number and other information (Figure 4).