Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would like to see traffic in bytes of individual users (IP's) in real time. Logging would be good too.

Additionally I would like to see which process (CGI.exe, php script etc) they are connected to or minimally what the GET/POST request was.

I have looked at many server monitoring tools but have not found something like this. Any suggestions would be appreciated.

share|improve this question

netstat -ab for connection points.

logparser to find users traffic.

share|improve this answer
Thank you for that. I was hoping for something in real time with a nice UI – Mike Trader Apr 3 '10 at 4:28

Have a look to Microsoft Network Monitor. It's free:

Also another choice would be Wireshark. It's free too.

share|improve this answer

tried Perfmon /res ?

It's possibly too realtime, but does what you're asking for the most part!

share|improve this answer

For users traffic I'd recommend ntop. The windows version is not free but it does work very well and it's very close to realtime.

share|improve this answer

TCPView does most of what you require...

In fact, if the entire SysInternals suite is quite useful in terms of logging on Windows and is quite lightweight as well and deals with networking, security, and other other issues.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.