How to establish which service is connecting to an IP address

[RAGGATIP]

Hi all,

I would like to know how to establish which service is connecting to an IP address address. I can see in Comodo that svchost.exe has established a connection but cannot find out exactly which service it is that's connecting.

Thanks in advance

[Tripredacus]

You may be able to find out more info using Process Explorer and Process Monitor. You can set ProcMon to use filters and enable extra information.

[cluberti]

+1 - Process Monitor can give you the Process ID (PID) and the callstack of the svchost making the request (just use the network filter in procmon), and Process Explorer can give you more information about that PID and what is running in it (if the stack from procmon doesn't already make it incredibly obvious).