How can I know which DLL owns a TCP/IP socket?

  • Thread starter Thread starter Vince C.
  • Start date Start date
V

Vince C.

Hi, all.

I've seen in my Firewall monitor SVCHOST.EXE makes connections to a host IP
that looks suspicious to me. How can I point to the exact DLL that owns the
connection while it's active?

Thanks in advance.
 
Chance Hopkins said:
The latest version of IpTools here:
http://www.ks-soft.net/
will show you what process opened a listener/connection on your machine.

There may be a cool "built in way" to do it, but I don't know what it is.

I've been using the program above for years off and on. It's REALLY COOL
Click to expand...
anyway. Check it out.

Thanks, Chance.

I tried it but I didn't see where I could get a listening process ID. Anyway
I'd like to know if it would allow me to know which DLL that was loaded by
SVCHOST.EXE owns a connection. Can IP-Tools do that? Should I start a
monitoring session other than "Connections"?

Vince C.
 
Back
Top