Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've been asked to compile a list of TCP/UDP and ports they use for the collection of application that comprise our product for a client who wants the information for their firewall.

So I fired up TCPView some of the processes are so short lived that I can't register the information fast enough and there is seemingly no way of recording it. I tried Capsa Free which records the connection but doesn't record the process - they seem to expect you to match it up manually via the PID.

Is there an application that will record the process, the protocol and teh local port it used for later consumption.

I'd rather not manually dig through the source to find which application/dll uses what.

share|improve this question
If it's your product can't you just consult the design documentation or ask the devs/designers ? – Iain Dec 15 '11 at 12:26
design documents. good one. – Sirex Dec 15 '11 at 12:39
The software has been organically grown over 11 years and despite the intial flurry of design, mostly it has been reactive to customer requirements. – graham.reeds Dec 15 '11 at 13:25

Use Windump or Wireshark to save the trace to a file, then analyze the output. Wireshark's statistical functions like "protocol hierarchy" or "conversations" might be of some help here.

share|improve this answer

Microsoft Network Monitor will do exactly that.

share|improve this answer
It's a better solution than wireshark in this case because it will allow you to select the traffic per application (which Wireshark/winpcap cannot do) – Stephane Dec 15 '11 at 14:00

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.