Q

How do I see packets that are dropped/blocked by my firewall?

When using TCP/IP filtering on XP, it writes a log to firewall in the Windows directory. The log only shows what was open and closed. I need to know what was blocked. Is there a way to turn this on? I could not find any doc from Microsoft.
TO see packets that are dropped (blocked) you must configure the security settings for the firewall. From the Local Area Connections Property pages, select the Advanced page and click the Settings button. Then on the Security Logging Page, check the box 'Log Dropped Packets.' The log will then contain this information.
This was last published in August 2002

Dig Deeper on Network intrusion detection and prevention and malware removal

PRO+

Content

Find more PRO+ content and other member only offers, here.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.

-ADS BY GOOGLE

SearchVirtualDesktop

SearchWindowsServer

SearchExchange

Close