stand alone program that shows the connections?

Comodo Internet Security - CIS Firewall Help - CIS
#1

this is somewhat on topic…

Is there a way to get a stand alone program that shows the connections, like when clicking on an item in the “inbound” section it brings up Comodo View Connections.

I’d like to have this as a stand alone little program I could bring up and leave on screen without having to keep the Comodo program open.

#2

You can create a shortcut for Comodo Killswitch. You will need to have previously installed it from within CIS (Tasks > Containment Tasks > Watch Activity).

Once installed it should be located in the following directory.

C:\Program Files\COMODO\COMODO Internet Security\KillSwitch.exe

Alternatively you can keep launching it from within CIS and then closing the CIS window.

#3

I use CurrPorts
Small portable program that shows all connections in progress
Right click on the connection then properties to know the values

#4

I tried this, but its not exactly the same GUI as comodo view connections, its pretty much the same as what you have with task manager, but thanks for the reply

#5

Yeah this is closer to the GUI of comdo view connections, but has a heck of a lot more info to clear through, I removed a mess of columns to get closer to what I want, but it is closer to what I wanted than killswitch.

btw, funny thing is I had this on my system a long time since I use WCSS that has several utility apps like nirsoft. thanks for showing me the way :slight_smile: I still would rather just see a simple GUI app like comodo view connections as a small stand alone with just the info that it shows, that’s all I need to keep tabs on what’s going on as far as traffic.

I still can’t quire figure out what all the svchost.exe’s are though, they seem to D/L constantly in the background, I know its in the MS system32 folder, but that’s all it points to, not what exactly is being downloaded and to what windows module. I’ve had 200+ svchost.exe D/L’s right after a normal 300mg WinCU update. My DSL is so slow that when these things kick in, I can’t do squat until they are done.

anyway thanks for the reply.

I fixed the quote. Eric

#6

This is a windows standard, the number of svchost processes being so large;
Each process is responsible for system drivers and services. :-TU

#7

Svchost.exe processes are part of the Windows operating system

  • Part with internal connections
  • An external connections part

Example to know an external connection via svchost.exe just proceed to a whois once the IP recovered
For IP 52.142.84.61 this is Microsoft:

Source: whois.arin.net
IP Address: 52.142.84.61
Name: MSFT
Handle: NET-52-132-0-0-1
Registration Date: 24/11/15
Range: 52.132.0.0-52.143.255.255
Org: Microsoft Corporation
Org Handle: MSFT
Address: One Microsoft Way
City: Redmond
State/Province: WA
Postal Code: 98052
Country: United States

#8

Svchost.exe is required because most services and other ‘system’ functions exist only as dll and not exe files. A dll file cannot own a process (which is the basic unit of work in Windows) only an exe file can do that. An existing process can load dll files however (that’s what dll files are for) so the svchost.exe process exists as a hosting process in which to load and run the appropriate svc dll file.

There are other hosting processes too; dllhost.exe for hosting dll files for COM objects and taskhost.exe for hosting user mode dll files…

#9

interesting, cause there are as many as 10 to 15 separate svchost downloading at times. What I’d like to be able to determine is just what .dll’s this thing is constantly updating if it just downloaded a CU. thanks for the info.

#10

I split posts from the release topic to use a separate discussion, also killswitch will show under the network tab the service responsible for each connection.

#11

You can try to use the resource monitor to check what’s going on:

#12

Try “TCPView” from sysinternals. I use it everyday to help trackdown what processes are making what connections especially svchost