Discover Open Ports In Windows

We can do this using netstat (network statistics) command in powershell or cmd.

It is used to display:

• open ports
• protocol statistics
• routing table
• network interfaces

1. Open cmd (command prompt) and type:

netstat /?

To get help about the command

2. netstat -ano

• -a Displays all connections and listening ports.

• -n Displays addresses and port numbers in numerical form.

• -o Displays process ID associated with each connection.

3. Use -b to display the .exe file associated with each connection.

• To use -b run cmd as administrator.

Tracing The Services Or Processes associated with the ports

1. Open Task Manger and go to services tab
2. Sort it by PID (Process ID)
3. Select the required PID (like 4424)

4. Right Click>Go to details
5. In Details tab, Right Click>properties

6. This will open up properties of the executable (.exe) associated with the service.

7. Here we can see mqsvc.exe (Message Queuing Service) with PID 4424 using the ports 1801,2103/5/7.