how can i monitor a internet program activity

Discussion in 'LnS English Forum' started by mantra, Feb 15, 2006.

Thread Status:
Not open for further replies.
  1. mantra
    Offline

    mantra Registered Member

    Hi

    i found several free & shareware that hidden send data to other sites , for example i ran these software and they try to contact chinese and unknow ip
    i did notice using a mp3 tag program that i use to grab album tracks names ,this program call freedb and chinese site and many others stealthily

    well how can i monitor with l&s the behavior of a program ?

    with l&s the situation is --> allow -->block
    Block i can't grab tracks names!
    allow --> the program will call home , freedb and many others sites

    yes i know i can do a filter, but i need to know the program activity before making the filter right?


    thanks
  2. CrazyM
    Offline

    CrazyM Firewall Expert

    You could enable logging of the application when permitted which might help determine how you could refine your rules.

    Sounds more like a program you do not trust which begs the question, why use it?

    Regards,

    CrazyM
  3. mantra
    Offline

    mantra Registered Member

    :D i did not use it

    but i found many many programs stealthily make extra connection


    so i think with l&s control in real time a program is impossible


    yes but it could be dangerous, i will know what the program did behind:mad:
  4. Frederic
    Offline

    Frederic LnS Developer

    In the application filtering, just select !! for the logging and for the application you would like to monitor.
    Then any access will be written in the logs for that application with ports & IP information.

    Frederic
  5. mantra
    Offline

    mantra Registered Member

    mercy Frederic


    does it works also when i block an application?


    sorry Frederic but it's not clear
    i can see only one (!!) close the the application ,and is on the left of the application name
    how can i enable !! for the logging & the application?
    Last edited: Feb 15, 2006
  6. Frederic
    Offline

    Frederic LnS Developer

    If the application is blocked, you will see only the attempt to connect, but no information regarding port or IP.

    If you press on time the icon in the ! column you get only one ! and only basic logging is enabled, if you press the icon a second time you get the !! icon and this time all access are logged (when the application is allowed).
    If you want to restrict the application to some ports or IP, double-click on the line (Advanced Mode has to be enabled in the advanced option to authorize that).

    Frederic
  7. mantra
    Offline

    mantra Registered Member

    :D thanks Frederic:D
Thread Status:
Not open for further replies.