User Guide

TCPView Professional
User’s Guide
5 The Static View
5.1 Interpreting the Output
The following screen demonstrates the different types of entries you may see
in the static view:
The columns are defined as follows:
Process: the name of the process that owns the endpoint. •
•
•
•
•
•
Protocol: the protocol of the endpoint, either UDP or TCP.
Local Address: the local IP address/port-pair of the endpoint. If DNS
name resolution is toggled on then the address is shown by name,
otherwise it is shown numerically.
Remote Address: the remote IP address/port-pair of the endpoint, if
applicable. Only TCP endpoints can have this field defined with an
address. UDP endpoints show "*.*" and TCP endpoints that are not
connected show "LISTENING"
Sent: the number of messages and bytes sent on an endpoint. The
number of messages are shown first, with a slash separating the two
numbers.
Received: the number of messages and bytes received on an
endpoint. The number of messages are shown first, with a slash
separating the two numbers.
The first two lines in the sample screen are UDP endpoints, which is the
reason that the remote address for these endpoints is shown as "*.*; UDP
Winternals Software Page 6