Network on Anything About IT

Collecting NetTcpConnection and Process information with PowerShell

Thu, 08 Feb 2018 14:28:19 +0000

if you need information on active TCP connections, you probably start with the netstat command When using the -b or -o parameter netstat will also list the executable involved in creating the process respectively the owing Process ID.

The output then looks as following.

In PowerShell we can use Get-NetTCPConnection to retrieve TCP connection information.

When suspecting that something malicious is running on a device, I look at the TCP connections and want to know more about the executable that owns the process. I am also interested in who’s owning the domain and where it’s geographically located. And so another cmdlet was born. Get-NetConnectionDetails

ToolTip: Test Poor Network Connectivity (TMNetsim)

Mon, 07 Mar 2011 20:56:41 +0000

A few days ago I found another utility for testing poor network connectivity. TMNetsim is a FREE utility provided by TMUrgent Technologies. TMnetsim is used to simulate a wide-area network for a single protocol. TMnetsim is primarily used to simulate network delay, however, in some (rare) cases it may be used to simulate packet loss or out-of-order delivery, as well as packet capture. (For more details read the provided tmnetsim.html file).

ToolTip: Network Emulator for Windows Toolkit

Sun, 21 Nov 2010 23:01:11 +0000

While watching the Deep Dive on Designing a BranchCache Infrastructure presentation I noticed the Network Emulator for Windows Toolkit (NEWT) that Tyler Barton was using to simulate a slow network link during his BranchCache demo.

After a quick search I’ve found a compiled version for 32 and 64 bit here provided by Marco Pol. NEWT is a Very useful easy to use tool if you want to simulate a slow network connection for testing BranchCache, Group Policies, Software Distribution or just for demonstration purposes.

ToolTip: Network Delay Simulator

Wed, 30 Jun 2010 18:03:00 +0000

How long does it take to copy 1 GB over a slow network connection? How fast does my virtual application start? Today I came across a nice FREE utility called Network Delay Simulator.

Network Simulator tool allows you to perform network bandwidth and delay simulation (simulate slow/congested links between nodes) on any connection from your computer to any remote node (on the local LAN or remote over Internet).

More information and download links can be found here

Testing Network Speed – Another one

Thu, 03 Jun 2010 17:34:45 +0000

Back in April i posted an article about Testing Network Speed, here’s another nice utility that allows testing your network speed, and even more. The Utility is called DownTester and is part of the awesome tool collection from NirSoft.

DownTester allows you to test the download speed via HTTP, FTP, Remote File Shares and any local drives such as your local drive, DVD and USB.

The Tool is FREE and does not need to be installed.

Testing Network Speed

Fri, 23 Apr 2010 15:34:34 +0000

There many tools out there that can measure the network speed between 2 computers, but either you have to pay for them or you need to go through a lengthy installation or configuration process. I want something that is FREE and easy to use. Here’s what I end up with after 30 minutes of browsing the web and doing some test installs of the various tools I found.

Test TCP Utility

ToolTip: SoftPerfect Network Scanner

Sat, 27 Feb 2010 17:00:43 +0000

Just found another nice FREE Utility. As the name says SoftPerfect Network Scanner allows you to scan your network and allows you to find any IP, NetBIOS or SNMP enabled devices. The tool also supports Remote WMI, Registry and Service access that can be customized to your own needs.

The Tool does not require installation. Download SoftPerfect Network Scanner from here

ToolTip: Network Lights

Tue, 15 Dec 2009 22:50:18 +0000

Network Lights developed by Igor Tolmachev is a Windows program, which blinks keyboard LEDs (Light Emitting Diode) indicating outgoing and incoming network packets on network interface.

Network Lights lets you monitor network activity (upload/download) from your keyboard ScrollLock and NumLock indicators. Each LED will flicker when network traffic is detected.

Network Lights can be downloaded from here.