You can use the netstat tool built into Windows to see what ports are open and connected on the server. At a command prompt, simply enter netstat –an|more to get a page by page count of what TCP and UDP ports are open and listening. An even better way to go about doing this is to use Foundstone's Vision tool or Sysinternals' TCPView tool as shown below with the NetBus Trojan highlighted.
Sysinternals' TCPView maps open ports to actual executable files
This is another reason to know your SQL Server inside and out. If you know what you're looking at then you'll know what you're looking for.
Kevin Beaver Kevin Beaver is an independent information security consultant and expert witness with Atlanta-based Principle Logic, LLC. He has more than 18 years of experience in IT and specializes in performing information security assessments revolving around compliance and IT governance. Kevin has authored/co-authored six books including , Hacking Wireless Networks For Dummies, and Securing the Mobile Enterprise For Dummies (all by Wiley), as well as The Practical Guide to HIPAA Privacy and Security Compliance (Auerbach). He can be reached at kbeaver ~at~ principlelogic.com. Copyright 2006TechTarget
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.
Sysinternals' TCPView maps open ports to actual executable files
Home: 
