In making the switch from Atelier's AWPTA to Port Explorer, and in-order to get a better feel for PE, I have a question about how Socket Spy functions. If the answer is in the help file please forgive me, for it did not catch my attention. Is it possible to spy on 2 or more processes/sockets at the same time? i.e. have say an IE process/socket and a process/socket for say svchost.exe in the list at the same time, and be able to switch between the 2. My reasoning is, to verify that a suspicious item is not using an established/allowed process/socket for communication. TIA for all answers.