For those of you that don't have this tool you might want to have a look see.. TCPView is a Windows program that will show you detailed listings of all TCP and UDP endpoints on your system, including the local and remote addresses and state of TCP connections. On Windows Server 2008, Vista, and XP, TCPView also reports the name of the process that owns the endpoint. TCPView provides a more informative and conveniently presented subset of the Netstat program that ships with Windows. The TCPView download includes Tcpvcon, a command-line version with the same functionality. http://technet.microsoft.com/en-us/sysinternals/bb897437.aspx Its easy to operate fast and efficient.. Hogndog
I like TcpLogView also and tend to prefer CurrPorts over TCPView. Nir Sofer writes a ton of useful utilities.