sysinternals.com has a nice tcpview package, allowing you to see the process and the connections which are active. I use this regularly on Windows XP for trouble shooting and Trojan/Virus hunting on clients' machines. (That's when you notice that the explorer process is suddenly listening on strange ports...)
Another nice to have tool from them is the Process Explorer, which shows much more detail on running processes... Once you have identified the offending IP, you will have to trace it in the .ipconn files in the user's directories, to see which user has last connected from that particular IP. Regards, Jorn. Tuesday, October 3, 2006, 5:45:16 AM, you wrote: > Thanks, but i not remember to say, i use Windows 2000 SP4. > Ana Paula > On 10/2/06, Simon Zarate <[EMAIL PROTECTED]> wrote: >> >> Try installing conky in your Server and setup portmon. You will see remote >> address while user is downloading the message. >> >> Simon >> >> -----Original Message----- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On >> Behalf Of Ana Paula Fernandes >> Sent: Lunes, 02 de Octubre de 2006 02:45 p.m. >> To: xmail@xmailserver.org >> Subject: [xmail] Monitoring Downloads >> >> >> Hi, >> >> I have a serious problem in my server, daily one user has using 100% >> of my link speed, my link is 512K and the user link is more, this user >> start a download of messages but allways never 100% complete to >> delete, i unknow the user, i need any mode to indentify this user to >> solve this problem. >> -- Best regards, Jorn mailto:[EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]
