Trying to understand how a software is counting concurrent users connected. Tried to analyze the machine on which is installed. (Registry and files modified) but nothing found. Best approach ?

Edit: As suggested wiresharks worked.

closed as unclear what you're asking by ChrisInEdmonton, fixer1234, DavidPostill, techraf, mdpc Oct 3 '16 at 19:15

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • There are numerous ways a program can do this. The real question is are you supposed to be limited to two users? Are you trying to circumvent your license? If not, have you contacted support? – Keltari Sep 29 '16 at 13:07

The software needs to find the number of concurrent users ON THE NETWORK. Thus it won't do any local changes (files, registry) on your PC.

One possibility is that this program is using a central license server software which is running on one of the computers and manages the shared licenses. But you didn't talk about such a program on your PC.

Therefore I assume it will rather have a built-in TCP or UDP server and client connections, and it will search the network for open ports of connections of other instances of this program on other PCs. Use Sysinternals TCPView and Wireshark to detect possible network communication.

  • Indeed Wireshark allowed me to undersand how this is working and to resolve a bug. Thanks. – sofsntp Sep 29 '16 at 13:17

Not the answer you're looking for? Browse other questions tagged or ask your own question.