User Guide

TCPView Professional
User’s Guide
1 Introduction
Welcome to TCPView Professional. TCPView Professional allows you to
monitor TCP/IP network activity on Windows NT 4.0, Windows 2000,
Windows XP, Windows Server 2003, and Windows 9x systems. Unlike built-
in TCP/IP monitoring tools that come with Windows (such as netstat),
TCPView Professional shows you which process is associated with each
TCP/IP address, making it easy to determine what application is responsible
for specific connections and activity. TCPView Professional also lets you see
TCP/IP activity by process in real-time, a feature not available with any other
utility.
These features make TCPView Professional a uniquely powerful tool for
networking and application troubleshooting. TCPView Professional also lets
you see the amount of data sent and received over a network connection,
which makes it a useful tool for performance diagnostics. Finally, TCPView
Professional offers a range of configuration options that let you auto-refresh
its display, save output to a file, and filter and highlight entries by process, IP
address, or port.
TCPView Professional’s capabilities let you:
Determine which process has an address opened •
•
•
•
•
•
See what remote network addresses suspicious applications are
accessing
Obtain detailed statistics on the amount of data sent and received
over a connection
Watch an application's TCP/IP activity in real-time
Save TCP/IP activity logs and connection information to file
Filter the data captured so that you only see accesses performed by a
specific process, or that involve particular local or remote addresses
Winternals Software Page 1