TCP View Utility to monitor the network activity on a machine
TCPView is a Windows program that will show you detailed listings of all TCP and UDP endpoints on your system, including the local and remote addresses and state of TCP connections.
On Windows Server 2008, Vista, NT, 2000 and XP TCPView also reports the name of the process that owns the endpoint.
TCPView provides a more informative and conveniently presented subset of the Netstat program that ships with Windows. The TCPView download includes Tcpvcon, a command-line version with the same functionality.
You can close established TCP/IP connections (those labeled with a state of ESTABLISHED) by selecting File|Close Connections, or by right-clicking on a connection and choosing Close Connections from the resulting context menu.
You can save TCPView's output window to a file using the Save menu item.
Comments
The Help File and maybe other files are not included
I thought that your TCPView Tool would be a handy thing to have. I downloaded it and thought that I would click on Help on the Toolbar to see if there was anything to learn about the tool. The response I received was that the TCPView.HLP file was missing.
I also do not see the TCPVCON file included either. The only file that that is included in your download is the TCPView.exe.
I'm wondering if there are other files not included.
TCP view
Downlaod TCP View from
http://technet.microsoft.com/en-us/sysinternals/bb897437.aspx
It is the complete file of 208 kb.
All the files are present and Help is also working.
Prachand Kumar MCSE-2003 Symantec Technical Specialist (SCTS)
.
Nice one Aniket, I was looking for this tool a while back. I downloaded an older version of this 5 years ago and couldn't find this by my usual search keys. I think it wasn't part of SysIntenals back then.
“Your most unhappy customers are your greatest source of learning.”
While I do agree that this is
While I do agree that this is a useful utility, I believe its lacking a few features that a lot of fellow sys admins and helpdesk troubleshooters would find invaluable.
1st - If you're already running SEP with Network Threat protection turned on, then you already have this at your fingertips on every client! Open SEP -> Next to Network Threat Protection click Options -> Select view network activity.
Then choose View -> connection details:
2nd - I still don't find that this has enough details to really hit a potential threat hard enough, so I use CurrPorts from http://www.nirsoft.net/utils/cports.html
Which gives you option to display the full path to the process and names the ports if it detects standard IANA usage. Also, like the Sysinternals utility above it gives the ability to terminate connections, kill applications, and export data to txt, csv, or even a pretty HTML table.
Hope someone finds this useful!
-JB
Would you like to reply?
Login or Register to post your comment.