Hello Gill, Your right that Active Ports does not show the exe for some processes. In my case they are all owned by 'system' and they are the ones that are know to be used by M$ for file and print sharing and other M$ 'magic' (Magic = things they don't want you to care about)
As far as what Active Ports is doing sending and recieving in memory? Without some more details as to how you could see this when you had unloaded Aports and what you actually saw I'd say it was just doing it's job of finding out what exe was bound to what ports. Shaun -----Original Message----- From: Sarbjit Singh Gill [mailto:[EMAIL PROTECTED]] Sent: Wednesday, June 12, 2002 7:26 PM To: Shaun Sturby; 'Steve Bremer' Cc: [EMAIL PROTECTED] Subject: RE: TCP port 3017 - Event Listener Greetings, APORTS does not show actual exe of some processes. It just list the path property as N/A. Also after unloading APORTS, I ran the Process Explorer from sysinternals.com and realize that the APORT was doing some receiving and sending in the memory. Any explanation. Thanks Gill MCT CIW CI & Security Analyst. ___________________________________________________________________________________ IMail Server has scanned this e-mail for viruses using Declude Virus from Optrics.com