312-50V10 · Question #766
Which utility will tell you in real time which ports are listening or in another state?
The correct answer is D. TCPView. TCPView is the Sysinternals utility that provides a continuously refreshed, real-time view of all TCP and UDP endpoints and their current states. The other tools are either static, off-target, or scanner-based.
Question
Which utility will tell you in real time which ports are listening or in another state?
Options
- ANetsat
- BLoki
- CNmap
- DTCPView
How the community answered
(46 responses)- A2% (1)
- B9% (4)
- C2% (1)
- D87% (40)
Why each option
TCPView is the Sysinternals utility that provides a continuously refreshed, real-time view of all TCP and UDP endpoints and their current states. The other tools are either static, off-target, or scanner-based.
Netstat (likely intended here, as 'Netsat' is a misspelling) produces a static point-in-time snapshot of connections and requires manual re-execution to see changes, so it does not provide a real-time continuous display.
Loki is a tool designed to detect covert channels over ICMP, not a general-purpose utility for monitoring local TCP/UDP port states.
Nmap is an active network scanner used for host discovery and port enumeration on remote targets, not a real-time live monitor of local port states.
TCPView (part of the Microsoft Sysinternals suite) displays a live, dynamically updated list of all TCP and UDP connections on the local system, including local and remote addresses, port numbers, and real-time connection states such as LISTENING, ESTABLISHED, and CLOSE_WAIT. Its continuous refresh capability makes it the correct tool when you need to observe port states as they change in real time.
Concept tested: Real-time TCP/UDP port state monitoring with TCPView
Source: https://learn.microsoft.com/en-us/sysinternals/downloads/tcpview
Topics
Community Discussion
No community discussion yet for this question.