IP & Socket Monitor Startup

View the Socket Activities of A Process

Select the process on the left view, the socket activities are displayed on the right view. See illustration

Forbidden Local Ports (FLP)

FLP do two things:

• Prohibit applications listening on the port(s).
• Prohibit applications using the port(s) sending or receiving UDP packets.

FLP does not blocks the port(s) simply by returning an error code to the application. It always returns what the normal routine would return --- just to make the application happy. This way, the application will run as smoothly as it would. In fact, this is how ports like 135 should be blocked: the connection queue gets full and further connections (SYN) are naturally rejected with RST. See IP Monitor illustration.

Forbidden Addresses (FA)

FA are the addresses that your computer can not communicate with, no matter they are servers or clients.

A FA entry consists of a IP and a port number, for example, 121.122.123.124:1234.

255 for a IP field or 0 for the port means any value, for example, 255.255.255.255:0 means the whole internet.

There are two sets of FAs, General FA and Individual FA. General FA applys to all applications, while Individual FA applys to one application.

IP Monitor

IP Monitor works on W2K and above. It monitors IP packets from and to your computer and your neighbours' computers using the same hub. There are two groups of options with IP Monitor right now, and more options will be added in the future. One option is "MSN Messenger". When selected, you see things like this.