Google Answers Logo
View Question
Q: Identifying which application or process ACTUALY use which TCP/UDP port ( Answered 5 out of 5 stars,   0 Comments )
Subject: Identifying which application or process ACTUALY use which TCP/UDP port
Category: Computers > Internet
Asked by: maksu-ga
List Price: $2.00
Posted: 25 Feb 2003 08:46 PST
Expires: 27 Mar 2003 08:46 PST
Question ID: 166897
How can I identify which application or process using which TCP/UDP
port in the Windows NT or Windows 2000? I can see the current
connections and listening ports by
netstat –a
command but I want to see which processes actualy own these ports.

I am not asking for services file under etc or a static table like as
“this kind of applications use these ports”.
I am trying to see this information from same computer. (I am not
searching for a port scanner).
A Unix equivalent also will be helpful.
Subject: Re: Identifying which application or process ACTUALY use which TCP/UDP port
Answered By: theta-ga on 25 Feb 2003 09:42 PST
Rated:5 out of 5 stars
Hi maksu-ga,
   The program you are looking for is TCPView from Sysinternals. From
the TCPView intro page :
   "TCPView is a Windows program that will show you detailed listings
of all TCP and UDP endpoints on your system, including the local and
remote addresses and state of TCP connections. On Windows NT, 2000 and
XP TCPView also reports the name of the process that owns the
endpoint. TCPView provides a more informative and conveniently
presented subset of the Netstat program that ships with Windows.
    TCPView works on Windows NT/2000/XP and Windows 98/Me. "
   You can download TCPView, and the source code for its commandline
equivalent from:
    - Sysinternals Freeware - TCPView
      ( )

   Another program you can use is TDIMon utility, again from
Sysinternals. Check it out at:
    - Sysinternals Freeware - TDIMon
      ( )

As for UNIX systems, the fstat command displays all open TCP(stream),
UDP(datagram), pipe and file descriptors along with the process that
opened them. The output of the fstat command varies slightly depending
on your version of Unix, but it should get the job done. Check out the
man page for more information. Also see this discussion:
      - dBforums: How to determine which process uses which tcp-udp
        ( )


Hope this helps.
If you need any clarifications, just ask!


Google/Google Groups Search Terms Used:
   How to determine which process uses which tcp-udp port
maksu-ga rated this answer:5 out of 5 stars
This is what I want.
Thank you very much.

There are no comments at this time.

Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  

Google Home - Answers FAQ - Terms of Service - Privacy Policy