TCPView offers two interesting functions out of the box: On Windows XP systems (or higher), TCPView shows the name of the process that owns each endpoint.Īs explained in the brief instructions that come with the application, TCPView updates every second, but you can use the Options -> Refresh Rate menu item to choose a different time (1, 2, 5 seconds or paused).Įndpoints that change state from one update to the next are highlighted in yellow and those that are deleted are shown in red. You can use a toolbar button or menu item to toggle the display of resolved names ( Options -> Resolve Addresses).
When you start TCPView it will enumerate all active TCP and UDP endpoints, resolving all IP addresses to their domain name versions. Starting from Windows XP (and moving through Vista, 7 or Server 2008) TCPView also reports the name of the process that owns the connection. You can download the latest version from This is a free program that shows you a detailed listings of all TCP and UDP endpoints exactly as Netstat would do, but in a clear and easy-to-read graphical interface.Īll the local and remote addresses endpoints and the state of TCP connections is displayed. That’s why the Sysinternals team at Microsoft has created TCPView. However its output is an old-style, text only list of connections, so it can be hard to use or clearly understand its content. Microsoft Windows is shipped with the command line utility Netstat that is commonly used to list all the connections opened on a machine and troubleshoot them. Same for any kind of questions.Where is connecting your machine? Are all the connections legitimate? Is somebody connecting to your machine? It’s very important to know about the various open TCP and UDP connections as some of them can be the clear indication that some Trojan is using your connection or that maybe somebody is trying to access your system. If you notice any kind of bugs or issues, report them here.
TCPView by Mark Russinovich (Sysinternals)
RtlIpv6StringToAddressW function (msdn) RtlIpv4StringToAddressW function (msdn) RtlIpv4AddressToStringW function (msdn) GetOwnerModuleFromUdpEntry function (msdn) GetOwnerModuleFromUdp6Entry function (msdn) GetOwnerModuleFromTcpEntry function (msdn) GetOwnerModuleFromTcp6Entry function (msdn) CreateToolhelp32Snapshot function (msdn) TCPView is a Windows program that will show you detailed listings of all TCP and UDP endpoints on your system, including the local and remote addresses and state of TCP connections.
0 kommentar(er)
