User Guide

TCPView Professional
User’s Guide
endpoints are connectionless, so they are not associated with any particular
remote address. Note that process services.exe (the Windows NT/Windows
2000 Service Control Manager) has sent 1688 messages totalling 91877
bytes over UDP endpoint DUAL:nbname.
The next four entries are connected TCP endpoints. For instance, process
RPSS (the Remote Procedure Call Subsystem) has TCP endpoint
DUAL:1026 connected to endpoint DUAL:1025.
Finally, the last line is a TCP endpoint that is not connected. Instead, it is in
the listening state, where the process is waiting for incoming connection
requests from remote addresses.
5.2 Showing Only Connected Endpoints
TCPView Professional shows all endpoints, including UDP, TCP connected
endpoints, and TCP unconnected endpoints. However, you can toggle the
show all endpoints button
, or the Options|Show All menu entry, to have
TCPView Professional only show connected TCP endpoints. TCPView
Professional's default behavior corresponds to the Windows netstat
command's -a option.
5.3 Controlling the Refresh Rate
By default TCPView Professional refreshes the contents of the static view
once every second. To change the refresh rate use the Configure|Refresh
Rate menu entry.
Winternals Software Page 7