Is it possible to know which process opened a connection in Windows?

Posted by Jader Dias on Super User See other posts from Super User or by Jader Dias
Published on 2010-04-20T14:46:12Z Indexed on 2010/04/20 14:53 UTC
Read the original article Hit count: 217

Filed under:

wireshark

|

netstat

|

Windows

|

tcpip

With netstat -a I can see all connections from my machine to the MySQL Server. There is any way too see which process or executable is responsible for each connection?

The only solution I found so far is to listen the packets and analyse the data inside it. But what if the data couldn't provide information about the process?

© Super User or respective owner

Related posts about wireshark

wireshark http POST

as seen on Server Fault - Search for 'Server Fault'
Hi I would like to have a http POST request method CAPTURE filter I know it is easy to do it by display filter http.request.method==POST but I need tcpdump compatible I wrote tcp dst port 80 and (tcp[13] = 0x18) But it is not perfect... tcp dst port 80 and (tcp[((tcp[12:1] & 0xf0) 2):4] =… >>> More
How to filter http traffic in Wireshark?

as seen on Server Fault - Search for 'Server Fault'
I suspect my server has a huge load of http requests from its clients. I want to measure the volume of http traffic. How can I do it with Wireshark? Or probably there is an alternative solution using another tool? This is how a single http request/response traffic looks in Wireshark. The ping is… >>> More
Multi language support in wireshark

as seen on Super User - Search for 'Super User'
Do we have multiple language support with Wireshark. We are using Windows Xp SP2 and Ubuntu Linux environment. Actually we have a plugin which is UDP based and we have a requirement to Analyse the Information in Packet List Pane and Packet Details Pane to be viewed in other languages like French… >>> More
Wireshark is not capturing traffic through http://localhost:8888

as seen on Super User - Search for 'Super User'
Currently, my wireshark can capture traffic from http://localhost (traffic that is on port 80) but it won't capture traffic on localhost:8888 Is there any extra configuration/software that I need for wireshark to capture traffic of localhost on this port? I'm running Ubuntu 9.10 >>> More
Saving Wireshark capture settings for future use

as seen on Server Fault - Search for 'Server Fault'
Is there any way to save Wireshark capture options? So it can be reuse after restart Wireshark. Also, if the saved file is in plain text, it's possible to use scripts generating bunch of capture settings, such with different filter setting. Does anyone know? Thanks. >>> More

Related posts about netstat

SMB starts but didn't show up in netstat

as seen on Server Fault - Search for 'Server Fault'
I've running an SMB server at a SLES 10 server. The SMB server starts up well without error messages in log files. But it didn't show up when I try to check with netstat if the smb server is listening at the designated ports. I've no more ideas about how to fix this problem. Note - the SMB server… >>> More
debugging spiking netstat "failed connection attempts" with iptables

as seen on Server Fault - Search for 'Server Fault'
http://farm4.static.flickr.com/3305/4588110530_a60c934289_o.png This graph is munin collecting netstat -s output. I want to determine where the connections are coming from. There is nothing obvious in wireshare dumps. It's been a while since I've done anything fancy with iptables. How can I go… >>> More
Netstat -i redirection problem

as seen on Super User - Search for 'Super User'
Hi ..When I run this command netstat -t 1 -i 2>&1 > $NETStat_OUT_FILE & inside a script , the output of netstat does not get redirected to the file.. Could any one find a solution for this ? >>> More
Why netstat reporting incorrect machine names?

as seen on Server Fault - Search for 'Server Fault'
I need to investigate what clients connected to my application and I am using the netstat command for this. I noticed that sometimes it does not report me the correct machine name. Why this is happening? Is there a better way to get the list of clients connected to my server? >>> More
Netstat -ban (or -oan) equivalent in C#

as seen on Stack Overflow - Search for 'Stack Overflow'
I'd like to know if a particular process is using a given port, i.e. netstat -ban. I came across using IPGlobalProperties to get the list of active connections, but this doesn't seem to include process information. It would be nice if there exists some class in C# that lets me do this programmatically… >>> More