Trying to understand how a software is counting concurrent users connected. Tried to analyze the machine on which is installed. (Registry and files modified) but nothing found. Best approach ?
Edit: As suggested wiresharks worked.
Super User is a question and answer site for computer enthusiasts and power users. It only takes a minute to sign up.Sign up to join this community
The software needs to find the number of concurrent users ON THE NETWORK. Thus it won't do any local changes (files, registry) on your PC.
One possibility is that this program is using a central license server software which is running on one of the computers and manages the shared licenses. But you didn't talk about such a program on your PC.
Therefore I assume it will rather have a built-in TCP or UDP server and client connections, and it will search the network for open ports of connections of other instances of this program on other PCs. Use Sysinternals TCPView and Wireshark to detect possible network communication.