Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Some software is using my port 80 and I don't what it is!

Is there a way to trace it back?

I've been hosting/test different web server but none of them are run at the moment, at least none that i know of!

windows 8.1 -btw sry

share|improve this question

closed as off-topic by Sven, MadHatter, MDMarra, Ward, cole Nov 16 '13 at 19:53

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions must be relevant to professional system administration. Server Fault is dedicated to professional system and network administrators. End user and enthusiast questions are off-topic (contact your system administrator or hire a professional to help you out). Please see the Help Center for more information." – Sven, MadHatter, MDMarra, cole
If this question can be reworded to fit the rules in the help center, please edit the question.

Really hard to answer this question without knowing your OS. What research have you done? – Drew Khoury Nov 16 '13 at 11:52
there sorry about that I'm one of thoes windows user that think the world would go under w/out it! – Bardia 'Luviz' Jedi Nov 16 '13 at 11:54
up vote 3 down vote accepted

On windows:

Run cmd as admin and then use:

netstat -tab


netstat -ab -p tcp

On Linux:

netstat -tap
share|improve this answer

Simply said - the kernel.

Port 80 is HTTP.

Kernel driver http.sys is handling this one - and all applications should basically register their URL's there. THis allow mutiple applications to serve different parts of the URL in parallel.

If you want to stop http.sys, have fun:

It would be better you would consider any software trying to own port 80 to be written by people not liking windows or not caring about the operating system features and thus forcing exclusive ownership on a known port.

It is quite trivial to register a URL for http.sys and then using the proper API's to get the requests from the kernel.

Any application not doing it - well, there are good and bad programs, and I don't have to run badly written ones.

The idea behind it is extremely good as multiple applications can then share the port.

Explanations - and screenshots of a management program, source included - can be seen at

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.