[Hirnsausen]

Often, my firewall questions me if I want to allow "Generic Host Process" (GHP) to access the Internet. However, unfortunately I don't get any more information what exactly the purpose is to access the Internet. The GHP can be used by many programs to do certain things for them.

I am a German and live in Jamaica. I was wondering a lot, why Microsoft sells Windows XP so unbelievably cheap here. I have certain speculations which are in relation to data privacy, espionage and backdoors for US authorities. But I am just not sure.

My question is, if anyone of you all know a software which can track down what data exactly GHP is transferring, and which programs or processes had call GHP to gain access to the Internet. I would be very interested to find answers to those two questions.

Also, using the Process Explorer, how exactly tp track down what software uses the GHP?

Thanks!

[lunarlander]

Windump is a general purpose network sniffiing application:

http://www.winpcap.org/windump/

It can display the contents of all tcp/ip packets going in and out of your machine.

[Hirnsausen]

Wonderful, that might help! I will keep you all up to date.

[Hirnsausen]

Hmmm.... But if the packages are not plain ASCII but hexadecimal (or whatever), I suspect I still would not know what the contents are of what is being broadcasted, right?

I need a tool which reports to me what software uses GHP (Generic Host Process) to transfer data from my computer to somewhere in the Internet.

[Clazzact]

http://www.winpcap.org/windump/docs/manual.htm

and check this link out

http://searchenterprisedesktop.techt...147392,00.html

go here to get a program to read live packets...
http://www.arechisoft.com/download.htm

help file

http://www.arechisoft.com/DownLoad/EtherSnoop.chm