协议分析网

　　zzzevazzz作者:zzzevazzz  

XP和2003下的netstat有-o选项，所以可以容易地实现fport。

vbs脚本版：
Codz:

with new regexp     .pattern="(..Ps+S+s+S+s+[A-Z]*)s*([0-9]+)"     .global=true     set ms=.execute(createobject("wscript.shell").exec("netstat -ano").stdout.readall) end with for each ps in getobject("winmgmts:\.\rootcimv2:win32_process").instances_     f=0     for each m in ms         if m.submatches(1)=ps.handle then             if f=0 then f=1:wscript.echo ">"&ps.handle&vbtab&ps.name&vbtab&ps. executablepath             wscript.echo " "&m.submatches(0)         end if     next next

照例给出echo版，方便在远程shell中使用。
@echo with new regexp:.pattern="(..P\s+\S+\s+\S+\s+[A-Z]*)\s*([0-9]+)":.global=true>fp.vbs
@echo set ms=.execute(createobject("wscript.shell").exec("netstat -ano").stdout.readall)>>fp.vbs
@echo end with:for each ps in getobject("winmgmts:\\.\root\cimv2:win32_process").instances_>>fp.vbs
@echo f=0:for each m in ms:if m.submatches(1)=ps.handle then _>>fp.vbs
@echo if f=0 then f=1:wscript.echo ">"^&ps.handle^&vbtab^&ps.name^&vbtab^&ps.executablepath:end if:_>>fp.vbs
@echo wscript.echo " "^&m.submatches(0):end if:next:next>>fp.vbs
@cscript //nologo fp.vbs&del fp.vbs