Blog

We are happy to announce a new release of NetStat Agent 3.1.1. This minor version has the following enhancements and bug-fixes:

- Fixed the problem with running a program with parameters (netstat monitor).
- Improved CPU performance when running a program (netstat monitor).
- A window of program invoked by netstat monitor can be hidden. This can be useful if you run batch scripts.

A portable version will be released soon.

We are happy to announce the portable version of NetStat Agent 3.1. The portable version you can download here.

In this version you do not need to get a trial key as it was in previous versions. But it still has a nag-screen in the evaluation mode when you close the program or switch tools.

Anyway, if you would like to purchase NetStat Agent license you must know that you may use a license key in both versions - desktop and portable!

We are pleased to announce the availability of a new stable NetStat Agent version. In the version 3.1 we are focused on fixing bugs, but some new features are also added.

So what’s new in NetStat Agent 3.1:

- IP-to-country database is updated.
- Fixed critical bug when network adapter has more than 1 ip addresses or gateways.
- NetStat monitor in 3.1 can runs scripts like bat-files, not only exe-files as it was in previous version.
- A couple of small bugs are solved in graphical user interface.
- Fixed the bug with auto scrolling text in DNS Query, Ping, Tracer and Whois tools (short hostname issue).
- Fixed a bug with manifest file in Vista\Windows 7. Now the application looks more native.
- Solved the issue with UDP connections in Windows 7.
- Fixed the problem with copy\paste (only one character could be copied).

If you use Windows 7 or Vista, please note that some features (close connection, change a MAC address, etc.) cannot work without administrative privileges. So you must run NetStat Agent as an Administrator:

Right Click the Application shortcut -> Properties -> Compatibility and check “Run this program as an Administrator”

Using NetStat Agent 3.0 has help me save quite a bit of time tracking down spammer IPs that have connections made to the mail server I administer. It would be amazing if NetStat Agent could kill a single thread of a process, but I’ll take what I can get. Thanks!

JR Fisch

Question

“I have logged NetStat acitivity for a couple of days. I am analyzing the log now. I cannot find a definition of what can be recorded in the Event Column. What exactly does changed mean? What exactly does new mean? What exactly does removed mean?”

Answer

Event Columns means a log record status, for example:
1) You click on file in your browser and the browser opens a TCP connection to download file.
2) At this moment NetStat Agent (NA) found that your browser opened a new connection, so because it is a new connection, NA sets a record status as “New”.
3) But when your browser downloaded a file, it closes the opened connection and at this moment NA writes to log file that connection is closed and sets a record status as “Removed”.

A record status “Changed” means that connection state (see column “Status” in NetStat window) is changed, for example:
1) Let assume you run Skype and connected to Skype server.
2) In this case NA will find a TCP connection with status - “ESTABLISHED”.
3) Then you decide to close Skype (disconnect).
4) It means that your PC (Skype application) will send a FIN packet (a TCP signal to close connection) to a remote host (Skype server).
5) For your PC it means a changing connection status from ESTABLISHED to FIN_WAIT1.
6) So when NetStat Agent detects connection status changes it writes to log file what connection is changed and sets a record status as “Changed” to event column.