Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How does Windows "netstat -b" determine the name of the process that owns each socket? [closed]

I'm looking for the underlying API calls that netstat -b is using to determine the owning processes for each socket. Any ideas?

like image 359
Stabledog Avatar asked Apr 23 '10 22:04

Stabledog


1 Answers

You need to look at the IPHelper APIs, in this case specifically GetExtendedTcpTable and GetOwnerModuleFromTcpEntry

like image 126
Stewart Avatar answered Nov 15 '22 03:11

Stewart