|
Posted by on October 29, 2007, 9:37 am
If you were Registered and logged in, you could reply and use other advanced thread options
On Oct 26, 3:54 pm, kingtho...@gmail.com wrote:
>
> > Can someone recommend a sniffer for Windows that will show the process ID
> > and name of the process sending or receiving each packet shown in the
> > sniffer?
>
> > I normally use ethereal or wireshark and didn't see a straightforward way to
> > include this information.
>
> > --
> > Will
>
> In WindowsXP you can use "netstat -ao" to see connections and the
> associated process ID (which you can then patch to process IDs/
> processes in task manager).
>
> "netstat -p TCP -ao" if you only wanna see TCP and not UDP.
>
> Pipe it to find if you want something specific, ie:
> C:\>netstat -p TCP -ao|find "slashdot"
> TCP machinename:2939 slashdot.org:http ESTABLISHED
> 3444
> TCP machinename:2940 images.slashdot.org:http
> ESTABLISHED 3444
> TCP machinename:2942 images.slashdot.org:http
> ESTABLISHED 3444
DOH that shoulda said "match" not "patch"..."(which you can then match
to process IDs) processes in task manager)"
| 
XML site map